Lucene search

K
osvGoogleOSV:CVE-2021-20196
HistoryMay 26, 2021 - 10:15 p.m.

CVE-2021-20196

2021-05-2622:15:07
Google
osv.dev
10
qemu
null pointer dereference
floppy disk emulator
privileged user
denial of service
system availability
vulnerability

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

23.5%

A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.