CVE-2020-16092
Low
Description
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.
SeverityLow
CVSS3.8
Exploit probability—
Product
Qemu
PublishedAug 11, 2020
First seenAug 11, 2020
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qemu qemu | v ≤ 5.0.0 | — |
| debian debian_linux | 9.0, 10.0 | — |
| canonical ubuntu_linux | 16.04, 18.04, 20.04 | — |
| opensuse leap | 15.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.