5.0
Medium
CVE-2020-10761 An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1
Description
An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QEMU: | Versions not published |
References
- www.openwall.com www.openwall.com
- bugzilla.redhat.com bugzilla.redhat.com
- openSUSE-SU-2020:1108 lists.opensuse.org
- security.netapp.com security.netapp.com
- USN-4467-1 usn.ubuntu.com
- GLSA-202011-09 security.gentoo.org
Timeline
- Published
- Last modified