CVE-2019-12067

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-06-02

Last modified

2024-08-04

Weaknesses

CWE-476

Affected products

• Debian Linux (Debian)
• Fedora (Fedoraproject)
• Qemu (Qemu)
• Enterprise Linux (Redhat)
• Openstack Platform (Redhat)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1145642
• https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01358.html
• https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01487.html
• https://security-tracker.debian.org/tracker/CVE-2019-12067
• https://security.netapp.com/advisory/ntap-20210727-0001/