CVE-2020-35506

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 6.0.0

Description The issue is related to a use-after-free vulnerability in the am53c974 SCSI host bus adapter emulation of QEMU. This vulnerability can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service. A privileged guest user can crash the QEMU process on the host, potentially leading to code execution with the privileges of the QEMU process. The vulnerability is triggered during the handling of the 'Information Transfer' command (CMD TI).

Recommendations For versions prior to 6.0.0, update to version 6.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the am53c974 SCSI host bus adapter emulation to minimize the risk of exploitation. Avoid using the 'Information Transfer' command (CMD TI) in the affected QEMU process until the issue is resolved.