Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-16092
HistoryAug 11, 2020 - 4:15 p.m.

CVE-2020-16092

2020-08-1116:15:12
CWE-617
[email protected]
web.nvd.nist.gov
291
cve-2020-16092
qemu
network packet processing
denial of service
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

3.8 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.4%

JSON

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.

Affected configurations

NVD
Node
qemuqemuRange≤5.0.0
Node
debiandebian_linuxMatch9.0
OR
debiandebian_linuxMatch10.0
Node
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch20.04lts
Node
opensuseleapMatch15.2
CPENameOperatorVersion
qemu:qemuqemule5.0.0

Related

openvas 20
redhatcve 1
osv 5
ubuntucve 1
veracode 1
prion 1
nvd 1
cbl_mariner 1
cvelist 1
debiancve 1
nessus 36
alpinelinux 1
redhat 6
amazon 2
oraclelinux 3
centos 1
debian 2
suse 1
rocky 1
almalinux 1
ubuntu 1
gentoo 1
openvas
openvas
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-2054)
2020-09-29 00:00:00
CentOS: Security Advisory for qemu-img (CESA-2021:0347)
2021-02-04 00:00:00
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2020-2531)
2020-12-15 00:00:00
redhatcve
redhatcve
CVE-2020-16092
2020-07-29 08:08:30
osv
osv
CVE-2020-16092
2020-08-11 16:15:12
qemu - security update
2020-09-13 00:00:00
qemu - security update
2020-09-06 00:00:00
ubuntucve
ubuntucve
CVE-2020-16092
2020-08-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-12-06 03:20:52
prion
prion
Denial of service
2020-08-11 16:15:00
nvd
nvd
CVE-2020-16092
2020-08-11 16:15:12
cbl_mariner
cbl_mariner
CVE-2020-16092 affecting package qemu-kvm 4.2.0-48
2020-11-05 04:21:31
cvelist
cvelist
CVE-2020-16092
2020-08-11 15:55:29
debiancve
debiancve
CVE-2020-16092
2020-08-11 16:15:12
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2020-2054)
2020-09-28 00:00:00
EulerOS 2.0 SP8 : qemu (EulerOS-SA-2020-2531)
2020-12-14 00:00:00
RHEL 7 : qemu-kvm (RHSA-2021:0347)
2021-02-03 00:00:00
alpinelinux
alpinelinux
CVE-2020-16092
2020-08-11 16:15:12
redhat
redhat
(RHSA-2021:0459) Moderate: qemu-kvm-rhev security update
2021-02-09 13:25:14
(RHSA-2021:0934) Moderate: qemu-kvm-rhev security update
2021-03-18 11:36:22
(RHSA-2020:5111) Moderate: virt:8.2 and virt-devel:8.2 security and bug fix update
2020-11-16 08:48:32
amazon
amazon
Medium: qemu-kvm
2021-03-18 17:30:00
Medium: qemu
2021-03-18 01:13:00
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2021-02-03 00:00:00
virt:ol and virt-devel:rhel security, bug fix, and enhancement update
2021-05-25 00:00:00
qemu security update
2021-02-08 00:00:00
centos
centos
qemu security update
2021-02-04 01:05:06
debian
debian
[SECURITY] [DLA 2373-1] qemu security update
2020-09-13 18:47:47
[SECURITY] [DSA 4760-1] qemu security update
2020-09-06 18:00:48
suse
suse
Security update for qemu (important)
2020-10-13 00:00:00
rocky
rocky
virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
2021-05-18 06:02:26
almalinux
almalinux
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
2021-05-18 06:02:26
ubuntu
ubuntu
QEMU vulnerabilities
2020-08-19 00:00:00
gentoo
gentoo
QEMU: Multiple Vulnerabilities
2022-08-14 00:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

3.8 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.4%

JSON
Related for CVE-2020-16092
openvas20redhatcve1osv5ubuntucve1veracode1prion1nvd1cbl_mariner1cvelist1debiancve1nessus36alpinelinux1redhat6amazon2oraclelinux3centos1debian2suse1rocky1almalinux1ubuntu1gentoo1