Every CVE Search/ Get API key

CVE-2020-35504

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions...

6.0 MediumFix available

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.34%Down 0.7 points since May 29, 2021
90%50%10%1%

What each source reports

NVD Score used 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-35504
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-35504
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2020-23173 No score

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
EUVD-2020-23173
Updated
2026-11-03
GitHub AdvisoriesGHSA-9hxx-56x6-jhj8 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions...

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
GHSA-9hxx-56x6-jhj8
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVALPINE-CVE-2020-35504 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
ALPINE-CVE-2020-35504
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-03
OSVBELL-CVE-2020-35504 6.0

CVE-2020-35504 does not affect BellSoft software

Record
BELL-CVE-2020-35504
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 16 moreShow less
OSV 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-35504
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-35504 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
DEBIAN-CVE-2020-35504
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2021-1241 6.5

qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.

Security Fix(es):

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-35504)

A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.(CVE-2021-3527)

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.(CVE-2021-20221)

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-35505)

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.(CVE-2019-12067)

Record
OESA-2021-1241
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-35504 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Record
UBUNTU-CVE-2020-35504
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2021:1202-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3527: usb: unbounded stack allocation in usbredir (bsc#1186012)
  • CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
  • CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
  • CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
  • CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
  • CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
  • CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
  • CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
  • CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
  • CVE-2021-3682: usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145)
  • CVE-2020-35503: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432)
  • CVE-2020-35504,CVE-2020-35505,CVE-2020-35506: NULL pointer dereference in ESP (bsc#1180433 bsc#1180434 bsc#1180435)
  • CVE-2021-20255: eepro100: stack overflow via infinite recursion (bsc#1182651)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1202-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2789-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Record
openSUSE-SU-2021:2789-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2858-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

  • Use max host physical address if -cpu max is used (bsc#1188299)
Record
openSUSE-SU-2021:2858-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3614-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
  • Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

  • Use max host physical address if -cpu max is used (bsc#1188299)
Record
openSUSE-SU-2021:3614-1
Updated
2026-11-02
OSVSUSE-SU-2021:2789-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Record
SUSE-SU-2021:2789-1
Updated
2026-11-02
OSVSUSE-SU-2021:2813-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Record
SUSE-SU-2021:2813-1
Updated
2026-11-02
OSVSUSE-SU-2021:2858-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

  • Use max host physical address if -cpu max is used (bsc#1188299)
Record
SUSE-SU-2021:2858-1
Updated
2026-11-02
OSVSUSE-SU-2021:3575-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Record
SUSE-SU-2021:3575-1
Updated
2026-11-02
OSVSUSE-SU-2021:3613-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
  • Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Record
SUSE-SU-2021:3613-1
Updated
2026-11-02
OSVSUSE-SU-2021:3614-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
  • Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

  • Use max host physical address if -cpu max is used (bsc#1188299)
Record
SUSE-SU-2021:3614-1
Updated
2026-11-02
OSVSUSE-SU-2021:3635-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
  • Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
  • usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
  • NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
  • NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
  • eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
  • usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Record
SUSE-SU-2021:3635-1
Updated
2026-11-02
OSVUSN-5010-1 No score

qemu vulnerabilities

Lei Sun discovered that QEMU incorrectly handled certain MMIO operations. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-15469)

Wenxiang Qian discovered that QEMU incorrectly handled certain ATAPI commands. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 21.04. (CVE-2020-29443)

Cheolwoo Myung discovered that QEMU incorrectly handled SCSI device emulation. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-35504, CVE-2020-35505, CVE-2021-3392)

Alex Xu discovered that QEMU incorrectly handled the virtio-fs shared file system daemon. An attacker inside the guest could possibly use this issue to read and write to host devices. This issue only affected Ubuntu 20.10. (CVE-2020-35517)

It was discovered that QEMU incorrectly handled ARM Generic Interrupt Controller emulation. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. (CVE-2021-20221)

Alexander Bulekov, Cheolwoo Myung, Sergej Schumilo, Cornelius Aschermann, and Simon Werner discovered that QEMU incorrectly handled e1000 device emulation. An attacker inside the guest could possibly use this issue to cause QEMU to hang, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. (CVE-2021-20257)

It was discovered that QEMU incorrectly handled SDHCI controller emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, when QEMU is used in combination with libvirt, attackers would be isolated by the libvirt AppArmor profile. (CVE-2021-3409)

It was discovered that QEMU incorrectly handled certain NIC emulation devices. An attacker inside the guest could possibly use this issue to cause QEMU to hang or crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. (CVE-2021-3416)

Remy Noel discovered that QEMU incorrectly handled the USB redirector device. An attacker inside the guest could possibly use this issue to cause QEMU to consume resources, resulting in a denial of service. (CVE-2021-3527)

It was discovered that QEMU incorrectly handled the virtio vhost-user GPU device. An attacker inside the guest could possibly use this issue to cause QEMU to consume resources, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3544)

It was discovered that QEMU incorrectly handled the virtio vhost-user GPU device. An attacker inside the guest could possibly use this issue to obtain sensitive host information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3545)

It was discovered that QEMU incorrectly handled the virtio vhost-user GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, when QEMU is used in combination with libvirt, attackers would be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3546)

It was discovered that QEMU incorrectly handled the PVRDMA device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, when QEMU is used in combination with libvirt, attackers would be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3582,…

Record
USN-5010-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Alpine:v3.16
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.17
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.18
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.19
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.20
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.21
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.22
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.23
 before 6.0.0-r2
6.0.0-r2
qemu
Alpine:v3.24
 before 6.0.0-r2
6.0.0-r2
qemu
Debian:12
 before 1:6.0+dfsg-3
1:6.0+dfsg-3
Show 38 moreShow less
Affected packages
PackageAffectedFixed
qemu
Debian:13
 before 1:6.0+dfsg-3
1:6.0+dfsg-3
qemu
Debian:14
 before 1:6.0+dfsg-3
1:6.0+dfsg-3
qemu
Debian:10
From an advisory covering 35 CVEs
 before 1:3.1+dfsg-8+deb10u9, plus listed versions
1:3.1+dfsg-81:3.1+dfsg-8+deb10u21:3.1+dfsg-8+deb10u31:3.1+dfsg-8+deb10u41:3.1+dfsg-8+deb10u5
Show 4 moreShow less
1:3.1+dfsg-8+deb10u61:3.1+dfsg-8+deb10u71:3.1+dfsg-8+deb10u81:3.1+dfsg-8~deb10u1
1:3.1+dfsg-8+deb10u9
qemu
openEuler:20.03-LTS-SP1
From an advisory covering 5 CVEs
 before 4.1.0-50.oe1
4.1.0-50.oe1
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 7 CVEs
 before 4.2.1-11.28.1
4.2.1-11.28.1
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 7 CVEs
 before 4.2.1-11.28.1
4.2.1-11.28.1
qemu
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 7 CVEs
 before 4.2.1-11.28.1
4.2.1-11.28.1
qemu
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 3.1.1.1-57.2
3.1.1.1-57.2
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 3.1.1.1-57.2
3.1.1.1-57.2
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 7 CVEs
 before 5.2.0-103.2
5.2.0-103.2
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 7 CVEs
 before 5.2.0-103.2
5.2.0-103.2
qemu
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 7 CVEs
 before 2.6.2-41.73.1
2.6.2-41.73.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 9 CVEs
 before 2.11.2-70.59.1
2.11.2-70.59.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 9 CVEs
 before 2.11.2-70.59.1
2.11.2-70.59.1
qemu
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 9 CVEs
 before 2.11.2-70.59.1
2.11.2-70.59.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 9 CVEs
 before 2.11.2-70.59.1
2.11.2-70.59.1
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 9 CVEs
 before 3.1.1.1-80.40.1
3.1.1.1-80.40.1
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 9 CVEs
 before 3.1.1.1-80.40.1
3.1.1.1-80.40.1
qemu
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 9 CVEs
 before 3.1.1.1-80.40.1
3.1.1.1-80.40.1
qemu
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 9 CVEs
 before 3.1.1.1-80.40.1
3.1.1.1-80.40.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 9 CVEs
 before 3.1.1.1-80.40.1
3.1.1.1-80.40.1
qemu
SUSE:Enterprise Storage 6
From an advisory covering 9 CVEs
 before 3.1.1.1-80.40.1
3.1.1.1-80.40.1
qemu
SUSE:OpenStack Cloud 9
From an advisory covering 9 CVEs
 before 2.11.2-5.40.2
2.11.2-5.40.2
qemu
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 9 CVEs
 before 2.11.2-5.40.2
2.11.2-5.40.2
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 2.11.2-5.40.2
2.11.2-5.40.2
qemu
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 9 CVEs
 before 2.11.2-5.40.2
2.11.2-5.40.2
qemu
Ubuntu:Pro:14.04:LTS
 before 2.0.0+dfsg-2ubuntu1.47+esm6, plus listed versions
1.5.0+dfsg-3ubuntu51.5.0+dfsg-3ubuntu61.6.0+dfsg-2ubuntu11.6.0+dfsg-2ubuntu21.6.0+dfsg-2ubuntu3
Show 45 moreShow less
1.6.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu11.7.0+dfsg-2ubuntu21.7.0+dfsg-2ubuntu31.7.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu51.7.0+dfsg-2ubuntu71.7.0+dfsg-2ubuntu81.7.0+dfsg-2ubuntu91.7.0+dfsg-3ubuntu1~ppa11.7.0+dfsg-3ubuntu11.7.0+dfsg-3ubuntu21.7.0+dfsg-3ubuntu31.7.0+dfsg-3ubuntu41.7.0+dfsg-3ubuntu51.7.0+dfsg-3ubuntu61.7.0+dfsg-3ubuntu72.0.0~rc1+dfsg-0ubuntu12.0.0~rc1+dfsg-0ubuntu22.0.0~rc1+dfsg-0ubuntu32.0.0~rc1+dfsg-0ubuntu3.12.0.0+dfsg-2ubuntu12.0.0+dfsg-2ubuntu1.12.0.0+dfsg-2ubuntu1.22.0.0+dfsg-2ubuntu1.32.0.0+dfsg-2ubuntu1.52.0.0+dfsg-2ubuntu1.62.0.0+dfsg-2ubuntu1.72.0.0+dfsg-2ubuntu1.82.0.0+dfsg-2ubuntu1.92.0.0+dfsg-2ubuntu1.102.0.0+dfsg-2ubuntu1.112.0.0+dfsg-2ubuntu1.132.0.0+dfsg-2ubuntu1.142.0.0+dfsg-2ubuntu1.152.0.0+dfsg-2ubuntu1.162.0.0+dfsg-2ubuntu1.172.0.0+dfsg-2ubuntu1.182.0.0+dfsg-2ubuntu1.192.0.0+dfsg-2ubuntu1.202.0.0+dfsg-2ubuntu1.212.0.0+dfsg-2ubuntu1.222.0.0+dfsg-2ubuntu1.242.0.0+dfsg-2ubuntu1.252.0.0+dfsg-2ubuntu1.26
2.0.0+dfsg-2ubuntu1.47+esm6
qemu
Ubuntu:Pro:16.04:LTS
 before 1:2.5+dfsg-5ubuntu10.51+esm4, plus listed versions
1:2.3+dfsg-5ubuntu91:2.3+dfsg-5ubuntu101:2.4+dfsg-4ubuntu11:2.4+dfsg-4ubuntu21:2.4+dfsg-4ubuntu3
Show 45 moreShow less
1:2.4+dfsg-5ubuntu31:2.5+dfsg-1ubuntu21:2.5+dfsg-1ubuntu31:2.5+dfsg-1ubuntu41:2.5+dfsg-1ubuntu51:2.5+dfsg-5ubuntu11:2.5+dfsg-5ubuntu21:2.5+dfsg-5ubuntu41:2.5+dfsg-5ubuntu61:2.5+dfsg-5ubuntu71:2.5+dfsg-5ubuntu101:2.5+dfsg-5ubuntu10.11:2.5+dfsg-5ubuntu10.21:2.5+dfsg-5ubuntu10.31:2.5+dfsg-5ubuntu10.41:2.5+dfsg-5ubuntu10.51:2.5+dfsg-5ubuntu10.61:2.5+dfsg-5ubuntu10.71:2.5+dfsg-5ubuntu10.81:2.5+dfsg-5ubuntu10.91:2.5+dfsg-5ubuntu10.101:2.5+dfsg-5ubuntu10.111:2.5+dfsg-5ubuntu10.131:2.5+dfsg-5ubuntu10.141:2.5+dfsg-5ubuntu10.151:2.5+dfsg-5ubuntu10.161:2.5+dfsg-5ubuntu10.201:2.5+dfsg-5ubuntu10.211:2.5+dfsg-5ubuntu10.221:2.5+dfsg-5ubuntu10.241:2.5+dfsg-5ubuntu10.251:2.5+dfsg-5ubuntu10.261:2.5+dfsg-5ubuntu10.281:2.5+dfsg-5ubuntu10.291:2.5+dfsg-5ubuntu10.301:2.5+dfsg-5ubuntu10.311:2.5+dfsg-5ubuntu10.321:2.5+dfsg-5ubuntu10.331:2.5+dfsg-5ubuntu10.341:2.5+dfsg-5ubuntu10.351:2.5+dfsg-5ubuntu10.361:2.5+dfsg-5ubuntu10.371:2.5+dfsg-5ubuntu10.381:2.5+dfsg-5ubuntu10.391:2.5+dfsg-5ubuntu10.40
1:2.5+dfsg-5ubuntu10.51+esm4
qemu
Ubuntu:18.04:LTS
 before 1:2.11+dfsg-1ubuntu7.37, plus listed versions
1:2.10+dfsg-0ubuntu31:2.10+dfsg-0ubuntu41:2.10+dfsg-0ubuntu51:2.11+dfsg-1ubuntu11:2.11+dfsg-1ubuntu2
Show 36 moreShow less
1:2.11+dfsg-1ubuntu41:2.11+dfsg-1ubuntu51:2.11+dfsg-1ubuntu61:2.11+dfsg-1ubuntu71:2.11+dfsg-1ubuntu7.11:2.11+dfsg-1ubuntu7.21:2.11+dfsg-1ubuntu7.31:2.11+dfsg-1ubuntu7.41:2.11+dfsg-1ubuntu7.51:2.11+dfsg-1ubuntu7.61:2.11+dfsg-1ubuntu7.71:2.11+dfsg-1ubuntu7.81:2.11+dfsg-1ubuntu7.91:2.11+dfsg-1ubuntu7.101:2.11+dfsg-1ubuntu7.121:2.11+dfsg-1ubuntu7.131:2.11+dfsg-1ubuntu7.141:2.11+dfsg-1ubuntu7.151:2.11+dfsg-1ubuntu7.171:2.11+dfsg-1ubuntu7.181:2.11+dfsg-1ubuntu7.191:2.11+dfsg-1ubuntu7.201:2.11+dfsg-1ubuntu7.211:2.11+dfsg-1ubuntu7.221:2.11+dfsg-1ubuntu7.231:2.11+dfsg-1ubuntu7.251:2.11+dfsg-1ubuntu7.261:2.11+dfsg-1ubuntu7.271:2.11+dfsg-1ubuntu7.281:2.11+dfsg-1ubuntu7.291:2.11+dfsg-1ubuntu7.311:2.11+dfsg-1ubuntu7.321:2.11+dfsg-1ubuntu7.331:2.11+dfsg-1ubuntu7.341:2.11+dfsg-1ubuntu7.351:2.11+dfsg-1ubuntu7.36
1:2.11+dfsg-1ubuntu7.37
qemu
Ubuntu:20.04:LTS
 before 1:4.2-3ubuntu6.17, plus listed versions
1:4.0+dfsg-0ubuntu91:4.0+dfsg-0ubuntu101:4.2-1ubuntu11:4.2-1ubuntu21:4.2-3ubuntu1
Show 20 moreShow less
1:4.2-3ubuntu21:4.2-3ubuntu31:4.2-3ubuntu41:4.2-3ubuntu51:4.2-3ubuntu61:4.2-3ubuntu6.11:4.2-3ubuntu6.21:4.2-3ubuntu6.31:4.2-3ubuntu6.41:4.2-3ubuntu6.51:4.2-3ubuntu6.61:4.2-3ubuntu6.71:4.2-3ubuntu6.81:4.2-3ubuntu6.91:4.2-3ubuntu6.101:4.2-3ubuntu6.111:4.2-3ubuntu6.121:4.2-3ubuntu6.141:4.2-3ubuntu6.151:4.2-3ubuntu6.16
1:4.2-3ubuntu6.17
qemu
Ubuntu:18.04:LTS
From an advisory covering 20 CVEs
 before 1:2.11+dfsg-1ubuntu7.37, plus listed versions
1:2.10+dfsg-0ubuntu31:2.10+dfsg-0ubuntu41:2.10+dfsg-0ubuntu51:2.11+dfsg-1ubuntu11:2.11+dfsg-1ubuntu2
Show 36 moreShow less
1:2.11+dfsg-1ubuntu41:2.11+dfsg-1ubuntu51:2.11+dfsg-1ubuntu61:2.11+dfsg-1ubuntu71:2.11+dfsg-1ubuntu7.11:2.11+dfsg-1ubuntu7.21:2.11+dfsg-1ubuntu7.31:2.11+dfsg-1ubuntu7.41:2.11+dfsg-1ubuntu7.51:2.11+dfsg-1ubuntu7.61:2.11+dfsg-1ubuntu7.71:2.11+dfsg-1ubuntu7.81:2.11+dfsg-1ubuntu7.91:2.11+dfsg-1ubuntu7.101:2.11+dfsg-1ubuntu7.121:2.11+dfsg-1ubuntu7.131:2.11+dfsg-1ubuntu7.141:2.11+dfsg-1ubuntu7.151:2.11+dfsg-1ubuntu7.171:2.11+dfsg-1ubuntu7.181:2.11+dfsg-1ubuntu7.191:2.11+dfsg-1ubuntu7.201:2.11+dfsg-1ubuntu7.211:2.11+dfsg-1ubuntu7.221:2.11+dfsg-1ubuntu7.231:2.11+dfsg-1ubuntu7.251:2.11+dfsg-1ubuntu7.261:2.11+dfsg-1ubuntu7.271:2.11+dfsg-1ubuntu7.281:2.11+dfsg-1ubuntu7.291:2.11+dfsg-1ubuntu7.311:2.11+dfsg-1ubuntu7.321:2.11+dfsg-1ubuntu7.331:2.11+dfsg-1ubuntu7.341:2.11+dfsg-1ubuntu7.351:2.11+dfsg-1ubuntu7.36
1:2.11+dfsg-1ubuntu7.37
qemu
Ubuntu:20.04:LTS
From an advisory covering 20 CVEs
 before 1:4.2-3ubuntu6.17, plus listed versions
1:4.0+dfsg-0ubuntu91:4.0+dfsg-0ubuntu101:4.2-1ubuntu11:4.2-1ubuntu21:4.2-3ubuntu1
Show 20 moreShow less
1:4.2-3ubuntu21:4.2-3ubuntu31:4.2-3ubuntu41:4.2-3ubuntu51:4.2-3ubuntu61:4.2-3ubuntu6.11:4.2-3ubuntu6.21:4.2-3ubuntu6.31:4.2-3ubuntu6.41:4.2-3ubuntu6.51:4.2-3ubuntu6.61:4.2-3ubuntu6.71:4.2-3ubuntu6.81:4.2-3ubuntu6.91:4.2-3ubuntu6.101:4.2-3ubuntu6.111:4.2-3ubuntu6.121:4.2-3ubuntu6.141:4.2-3ubuntu6.151:4.2-3ubuntu6.16
1:4.2-3ubuntu6.17
qemu
openSUSE:Leap 15.2
From an advisory covering 15 CVEs
 before 4.2.1-lp152.9.20.1
4.2.1-lp152.9.20.1
qemu-linux-user
openSUSE:Leap 15.2
From an advisory covering 15 CVEs
 before 4.2.1-lp152.9.20.1
4.2.1-lp152.9.20.1
qemu-testsuite
openSUSE:Leap 15.2
From an advisory covering 15 CVEs
 before 4.2.1-lp152.9.20.1
4.2.1-lp152.9.20.1
qemu
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 4.2.1-11.28.1
4.2.1-11.28.1
qemu
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 5.2.0-103.2
5.2.0-103.2
qemu
openSUSE:Leap 15.3
From an advisory covering 9 CVEs
 before 3.1.1.1-80.40.1
3.1.1.1-80.40.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-35504 is a medium vulnerability (CVSS 6.0) in Qemu, published May 28, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in qemu 6.0.0-r2.

References

Show 81 moreShow less
This page doesn't list everything

Left out here: 37 versions and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open