Unrated severityNVD Advisory· Published Jun 9, 2020· Updated Aug 4, 2024
CVE-2020-10761
CVE-2020-10761
Description
An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- osv-coords6 versionspkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/qemu&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/qemu-linux-user&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/qemu-testsuite&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2
< 4.2.1-lp152.9.3.1+ 5 more
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 6.1.0-32.1
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 4.2.1-11.4.4
- (no CPE)range: < 4.2.1-11.4.4
- Red Hat/QEMU:v5Range: all QEMU versions before QEMU 5.0.1
Patches
Vulnerability mechanics
References
6- lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.htmlmitrevendor-advisoryx_refsource_SUSE
- security.gentoo.org/glsa/202011-09mitrevendor-advisoryx_refsource_GENTOO
- usn.ubuntu.com/4467-1/mitrevendor-advisoryx_refsource_UBUNTU
- bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
- security.netapp.com/advisory/ntap-20200731-0001/mitrex_refsource_CONFIRM
- www.openwall.com/lists/oss-security/2020/06/09/1mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.