Medium severity5.0NVD Advisory· Published Jun 9, 2020· Updated Jun 17, 2026
CVE-2020-10761
CVE-2020-10761
Description
An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
- osv-coords6 versionspkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/qemu&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/qemu-linux-user&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/qemu-testsuite&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2
< 4.2.1-lp152.9.3.1+ 5 more
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 6.1.0-32.1
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 4.2.1-11.4.4
- (no CPE)range: < 4.2.1-11.4.4
- Red Hat/QEMU:v5Range: all QEMU versions before QEMU 5.0.1
Patches
Vulnerability mechanics
References
6- www.openwall.com/lists/oss-security/2020/06/09/1nvdMailing ListPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.htmlnvdMailing ListThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- security.gentoo.org/glsa/202011-09nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20200731-0001/nvdThird Party Advisory
- usn.ubuntu.com/4467-1/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.