Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2020-25723 Details
Description
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1898579 | CVE | Issue TrackingPatchThird Party Advisory |
| https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html | CVE | Mailing ListThird Party Advisory |
| https://security.netapp.com/advisory/ntap-20201218-0004/ | CVE | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2020/12/22/1 | CVE | Mailing ListPatchThird Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1898579 | [email protected] | Issue TrackingPatchThird Party Advisory |
| https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html | [email protected] | Mailing ListThird Party Advisory |
| https://security.netapp.com/advisory/ntap-20201218-0004/ | [email protected] | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2020/12/22/1 | [email protected] | Mailing ListPatchThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-617 | Reachable Assertion | [email protected] |
| CWE-617 | Reachable Assertion | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qemu qemu | <= 5.1.1 |
CPE
Remediation
| |
| debian debian linux | 10.0 |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Sep 30, 2022 | Modified Analysis | [email protected] |
| Sep 5, 2022 | CVE Modified | [email protected] |
| Dec 28, 2020 | Reanalysis | [email protected] |
| Dec 23, 2020 | Modified Analysis | [email protected] |
| Dec 22, 2020 | CVE Modified | [email protected] |
| Dec 18, 2020 | CVE Modified | [email protected] |
| Dec 7, 2020 | Initial Analysis | [email protected] |