Vulnerability · Published Jun 9, 2020 · Assigned by redhat

CVE-2020-10761

Medium 5.0

In plain English

A medium-severity security flaw in QEMU: from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.0Medium

Exploit odds (30 days)1.8%top 21.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	qemu	1:5.0-6	DEBIAN-CVE-2020-10761
Debian:13	qemu	1:5.0-6	DEBIAN-CVE-2020-10761
Debian:14	qemu	1:5.0-6	DEBIAN-CVE-2020-10761

Affected products (as reported)

Vendor	Product	Versions
Red Hat	QEMU:	all QEMU versions before QEMU 5.0.1

Weakness: CWE-617 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

References

https://www.openwall.com/lists/oss-security/2020/06/09/1 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10761 x_refsource_CONFIRM
openSUSE-SU-2020:1108 vendor-advisory, x_refsource_SUSE
https://security.netapp.com/advisory/ntap-20200731-0001/ x_refsource_CONFIRM
USN-4467-1 vendor-advisory, x_refsource_UBUNTU
GLSA-202011-09 vendor-advisory, x_refsource_GENTOO