Unrated severityNVD Advisory· Published May 4, 2020· Updated Aug 4, 2024

CVE-2020-10717

Description

A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs is meant to share a host file system directory with a guest via virtio-fs device. If the guest opens the maximum number of file descriptors under the shared directory, a denial of service may occur. This flaw allows a guest user/process to cause this denial of service on the host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

QEMU/Qemullm-fuzzy2 versions
>=5.0+ 1 more
- (no CPE)range: >=5.0
- (no CPE)range: >= QEMU v5.0
osv-coords
pkg:rpm/opensuse/qemu&distro=openSUSE%20Tumbleweed
Range: < 6.1.0-32.1

Patches

Vulnerability mechanics

References

security.gentoo.org/glsa/202011-09mitrevendor-advisory
bugzilla.redhat.com/show_bug.cgimitre
lists.gnu.org/archive/html/qemu-devel/2020-05/msg00141.htmlmitre
lists.gnu.org/archive/html/qemu-devel/2020-05/msg00143.htmlmitre
www.openwall.com/lists/oss-security/2020/05/04/1mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000