CVE-2020-25723

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

• CWE-617
• CWE-617

• http://www.openwall.com/lists/oss-security/2020/12/22/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1898579Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20201218-0004/Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/12/22/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1898579Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20201218-0004/Third Party Advisory

Published

Dec 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25718A flaw was found in the way samba, as an Active Directory Do…8.8
• CVE-2020-25719A flaw was found in the way Samba, as an Active Directory Do…7.2
• CVE-2020-2572Vulnerability in the MySQL Server product of Oracle MySQL (c…2.7
• CVE-2020-25720A vulnerability was found in Samba where a delegated adminis…7.5
• CVE-2020-25721Kerberos acceptors need easy access to stable AD identifiers…8.8
• CVE-2020-25722Multiple flaws were found in the way samba AD DC implemented…8.8
• CVE-2020-25724A flaw was found in RESTEasy, where an incorrect response to…4.3
• CVE-2020-25725In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state)…5.5
• CVE-2020-25726Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-25727The Reset Password add-on before 1.2.0 for Alfresco suffers …7.5
• CVE-2020-25728The Reset Password add-on before 1.2.0 for Alfresco has a br…8.8
• CVE-2020-25729ZoneMinder before 1.34.21 has XSS via the connkey parameter …6.1