CVE-2020-25723: debian debian_linux Reachable Assertion

Modified

AliasesRHSA-2021:0771UBUNTU-CVE-2020-25723DEBIAN-CVE-2020-25723+1 more

Published 02-12-2020Last modified 04-08-2024

Vulnerability summary

CVE-2020-25723 is a low (CVSS 3.2) Reachable Assertion vulnerability in debian debian_linux. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 30.3% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 3.2, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

3.2/10

010

Low · v3.1 (NVD)

EPSS score

0.36%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

02-12-2020
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.13.2v2.02.1

EPSS trend

Probability

0.36%

Chance of exploitation in the next 30 days

Percentile

30%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.36% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-617Reachable AssertionThe product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Affected systems

Version check

Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat176 products

hivex< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
hivex-debuginfo< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
hivex-debugsource< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
hivex-devel< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
libguestfs< 1:1.38.4-15.module+el8.2.0+5297+222a20af

libguestfs-bash-completion< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-benchmarking< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-benchmarking-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-debugsource< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-devel< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-gfs2< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-gobject< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-gobject-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-gobject-devel< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-inspect-icons< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-java< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-java-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-java-devel< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-javadoc< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-man-pages-ja< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-man-pages-uk< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-rescue< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-rsync< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-tools< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-tools-c< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-tools-c-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libguestfs-winsupport< 0:8.0-4.module+el8.1.0+4066+0f1aadab
libguestfs-xfs< 1:1.38.4-15.module+el8.2.0+5297+222a20af
libiscsi< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-debuginfo< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-debugsource< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-devel< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utils< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utils-debuginfo< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libvirt< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-admin< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-admin-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-bash-completion< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-client< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-client-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-config-network< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-config-nwfilter< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-interface< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-interface-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-network< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-network-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-nodedev< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-nodedev-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-nwfilter< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-nwfilter-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-qemu< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-qemu-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-secret< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-secret-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-core< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-core-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-disk< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-disk-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-gluster< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-gluster-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-iscsi< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-iscsi-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-logical< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-logical-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-mpath< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-mpath-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-rbd< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-rbd-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-scsi< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-driver-storage-scsi-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-daemon-kvm< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-dbus< 0:1.2.0-3.module+el8.1.0+4066+0f1aadab
libvirt-dbus-debuginfo< 0:1.2.0-3.module+el8.1.0+4066+0f1aadab
libvirt-dbus-debugsource< 0:1.2.0-3.module+el8.1.0+4066+0f1aadab
libvirt-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-debugsource< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-devel< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-docs< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-libs< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-libs-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-lock-sanlock< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-lock-sanlock-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-nss< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-nss-debuginfo< 0:4.5.0-42.module+el8.2.0+6024+15a2423f
libvirt-python< 0:4.5.0-2.module+el8.1.0+4066+0f1aadab
libvirt-python-debugsource< 0:4.5.0-2.module+el8.1.0+4066+0f1aadab
lua-guestfs< 1:1.38.4-15.module+el8.2.0+5297+222a20af
lua-guestfs-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
nbdkit< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-bash-completion< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-basic-plugins< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-basic-plugins-debuginfo< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-debuginfo< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-debugsource< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-devel< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-example-plugins< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-example-plugins-debuginfo< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-gzip< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-gzip-debuginfo< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python-common< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python3< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python3-debuginfo< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-vddk< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-vddk-debuginfo< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-xz< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-xz-debuginfo< 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
netcf< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-debuginfo< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-debugsource< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-devel< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libs< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libs-debuginfo< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
ocaml-hivex< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
ocaml-hivex-debuginfo< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
ocaml-hivex-devel< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
ocaml-libguestfs< 1:1.38.4-15.module+el8.2.0+5297+222a20af
ocaml-libguestfs-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
ocaml-libguestfs-devel< 1:1.38.4-15.module+el8.2.0+5297+222a20af
perl-hivex< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
perl-hivex-debuginfo< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
perl-Sys-Guestfs< 1:1.38.4-15.module+el8.2.0+5297+222a20af
perl-Sys-Guestfs-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
perl-Sys-Virt< 0:4.5.0-5.module+el8.1.0+4066+0f1aadab
perl-Sys-Virt-debuginfo< 0:4.5.0-5.module+el8.1.0+4066+0f1aadab
perl-Sys-Virt-debugsource< 0:4.5.0-5.module+el8.1.0+4066+0f1aadab
python3-hivex< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
python3-hivex-debuginfo< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
python3-libguestfs< 1:1.38.4-15.module+el8.2.0+5297+222a20af
python3-libguestfs-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
python3-libvirt< 0:4.5.0-2.module+el8.1.0+4066+0f1aadab
python3-libvirt-debuginfo< 0:4.5.0-2.module+el8.1.0+4066+0f1aadab
qemu-guest-agent< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-guest-agent-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-img< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-img-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-curl< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-curl-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-gluster< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-gluster-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-iscsi< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-iscsi-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-rbd< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-rbd-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-ssh< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-block-ssh-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-common< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-common-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-core< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-core-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-debugsource< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-tests< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
qemu-kvm-tests-debuginfo< 15:2.12.0-99.module+el8.2.0+9793+0e887671.5
ruby-hivex< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
ruby-hivex-debuginfo< 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
ruby-libguestfs< 1:1.38.4-15.module+el8.2.0+5297+222a20af
ruby-libguestfs-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
seabios< 0:1.11.1-4.module+el8.1.0+4066+0f1aadab
seabios-bin< 0:1.11.1-4.module+el8.1.0+4066+0f1aadab
seavgabios-bin< 0:1.11.1-4.module+el8.1.0+4066+0f1aadab
sgabios< 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab
sgabios-bin< 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab
SLOF< 0:20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab
supermin< 0:5.1.19-9.module+el8.1.0+4066+0f1aadab
supermin-debuginfo< 0:5.1.19-9.module+el8.1.0+4066+0f1aadab
supermin-debugsource< 0:5.1.19-9.module+el8.1.0+4066+0f1aadab
supermin-devel< 0:5.1.19-9.module+el8.1.0+4066+0f1aadab
virt-dib< 1:1.38.4-15.module+el8.2.0+5297+222a20af
virt-dib-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af
virt-v2v< 1:1.38.4-15.module+el8.2.0+5297+222a20af
virt-v2v-debuginfo< 1:1.38.4-15.module+el8.2.0+5297+222a20af

Show all 176

Debian2 products

qemu< 1:5.2+dfsg-1
debian_linuxEOL10.0

Alpine1 product

qemu< 5.2.0-r0

Qemu1 product

qemu≤ 5.1.1

Ubuntu1 product

qemu< 2.0.0+dfsg-2ubuntu1.47+esm6 | < 1:2.5+dfsg-5ubuntu10.48 | < 1:2.11+dfsg-1ubuntu7.34 | < 1:4.2-3ubuntu6.10

5 vendors · 181 products

References

15 links

bugzilla.redhat.com/show_bug.cgi?id=1898579X Refsource MISCREPORTIssue TrackingPatchThird Party Advisory
security.netapp.com/advisory/ntap-20201218-0004/X Refsource CONFIRMThird Party Advisory
www.openwall.com/lists/oss-security/2020/12/22/1Mailing ListX Refsource MLISTPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing ListX Refsource MLISTThird Party Advisory
access.redhat.com/errata/RHSA-2021:0771Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0771.jsonAdvisory
access.redhat.com/security/cve/CVE-2020-25723REPORT
www.cve.org/CVERecord?id=CVE-2020-25723AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2020-25723AdvisoryOval

Show all 15 references

ubuntu.com/security/CVE-2020-25723REPORT
ubuntu.com/security/notices/USN-4650-1Advisory
ubuntu.com/security/notices/USN-8412-1Advisory
security-tracker.debian.org/tracker/CVE-2020-25723Advisory
security.alpinelinux.org/vuln/CVE-2020-25723Advisory