Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-20175

An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 (the size of a sector). NOTE: a member of the QEMU security team disputes the significance of this issue because a "privileged guest user has many ways to cause similar DoS effect, without triggering this assert.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2019-20175
  • Qemu » Qemu » Version: 2.10.0
    cpe:2.3:a:qemu:qemu:2.10.0
  • Qemu » Qemu » Version: 2.10.1
    cpe:2.3:a:qemu:qemu:2.10.1
  • Qemu » Qemu » Version: 2.10.2
    cpe:2.3:a:qemu:qemu:2.10.2
  • Qemu » Qemu » Version: 2.11.0
    cpe:2.3:a:qemu:qemu:2.11.0
  • Qemu » Qemu » Version: 2.11.1
    cpe:2.3:a:qemu:qemu:2.11.1
  • Qemu » Qemu » Version: 2.11.2
    cpe:2.3:a:qemu:qemu:2.11.2
  • Qemu » Qemu » Version: 2.12.0
    cpe:2.3:a:qemu:qemu:2.12.0
  • Qemu » Qemu » Version: 2.12.1
    cpe:2.3:a:qemu:qemu:2.12.1
  • Qemu » Qemu » Version: 2.12.50
    cpe:2.3:a:qemu:qemu:2.12.50
  • Qemu » Qemu » Version: 2.17.2
    cpe:2.3:a:qemu:qemu:2.17.2
  • Qemu » Qemu » Version: 2.4.0
    cpe:2.3:a:qemu:qemu:2.4.0
  • Qemu » Qemu » Version: 2.4.0.1
    cpe:2.3:a:qemu:qemu:2.4.0.1
  • Qemu » Qemu » Version: 2.4.1
    cpe:2.3:a:qemu:qemu:2.4.1
  • Qemu » Qemu » Version: 2.5.0
    cpe:2.3:a:qemu:qemu:2.5.0
  • Qemu » Qemu » Version: 2.5.1
    cpe:2.3:a:qemu:qemu:2.5.1
  • Qemu » Qemu » Version: 2.5.1.1
    cpe:2.3:a:qemu:qemu:2.5.1.1
  • Qemu » Qemu » Version: 2.6.0
    cpe:2.3:a:qemu:qemu:2.6.0
  • Qemu » Qemu » Version: 2.6.1
    cpe:2.3:a:qemu:qemu:2.6.1
  • Qemu » Qemu » Version: 2.6.2
    cpe:2.3:a:qemu:qemu:2.6.2
  • Qemu » Qemu » Version: 2.7.0
    cpe:2.3:a:qemu:qemu:2.7.0
  • Qemu » Qemu » Version: 2.7.1
    cpe:2.3:a:qemu:qemu:2.7.1
  • Qemu » Qemu » Version: 2.8.0
    cpe:2.3:a:qemu:qemu:2.8.0
  • Qemu » Qemu » Version: 2.8.1
    cpe:2.3:a:qemu:qemu:2.8.1
  • Qemu » Qemu » Version: 2.8.1.1
    cpe:2.3:a:qemu:qemu:2.8.1.1
  • Qemu » Qemu » Version: 2.9.0
    cpe:2.3:a:qemu:qemu:2.9.0
  • Qemu » Qemu » Version: 2.9.1
    cpe:2.3:a:qemu:qemu:2.9.1
  • Qemu » Qemu » Version: 3.0.0
    cpe:2.3:a:qemu:qemu:3.0.0
  • Qemu » Qemu » Version: 3.0.1
    cpe:2.3:a:qemu:qemu:3.0.1
  • Qemu » Qemu » Version: 3.1
    cpe:2.3:a:qemu:qemu:3.1
  • Qemu » Qemu » Version: 3.1.0
    cpe:2.3:a:qemu:qemu:3.1.0
  • Qemu » Qemu » Version: 3.1.1
    cpe:2.3:a:qemu:qemu:3.1.1
  • Qemu » Qemu » Version: 3.1.1.1
    cpe:2.3:a:qemu:qemu:3.1.1.1
  • Qemu » Qemu » Version: 3.1.50
    cpe:2.3:a:qemu:qemu:3.1.50
  • Qemu » Qemu » Version: 4.0.0
    cpe:2.3:a:qemu:qemu:4.0.0
  • Qemu » Qemu » Version: 4.0.1
    cpe:2.3:a:qemu:qemu:4.0.1
  • Qemu » Qemu » Version: 4.1.0
    cpe:2.3:a:qemu:qemu:4.1.0
  • Qemu » Qemu » Version: 4.1.1
    cpe:2.3:a:qemu:qemu:4.1.1
  • Qemu » Qemu » Version: 4.2.0
    cpe:2.3:a:qemu:qemu:4.2.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved