CVE-2020-35504

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 6.0.0

Description A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this issue is to system availability.

Recommendations For versions prior to 6.0.0, update to version 6.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the SCSI emulation support to minimize the risk of exploitation.