CVE-2020-25084: QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked

Low severity · published Sep 25, 2020

CVE-2020-25084

QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked

3.2

CVSS

0.3%

EPSS

On KEV

Description

QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Attack vector

Local

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

None

Integrity

None

Availability

Low

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 28% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Debian Linux · Debian

9.0; 10.0 · source: NVD

Qemu · Qemu

5.0.0 · source: NVD

Affected product

Debian Linux

Debian

All Debian Linux CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2020-25084

CVE.org

https://www.cve.org/CVERecord?id=CVE-2020-25084

Mailing List

http://www.openwall.com/lists/oss-security/2020/09/16/5

Mailing List

https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html

Mailing List

https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html

Mailing List

https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html

Third Party Advisory

https://security.netapp.com/advisory/ntap-20201009-0005/