CVE-2020-16092: Low severity qemu vulnerability
An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service.
Other sources
An assertion failure issue was found in the nettxpktaddrawfragment() function in hw/net/nettxpkt.c. This assertion comes from the code that processes network packets. This code is shared between e1000e, vmxnet3 and apparently a few more devices. A malicious guest user/process could abuse this flaw to abort the QEMU process on the host, resulting in a denial of service condition.
— Red Hat
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in nettxpktaddrawfragment in hw/net/nettxpkt.c.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-16092.
What is the severity of CVE-2020-16092?
The severity of CVE-2020-16092 is low.
Which software is affected by CVE-2020-16092?
QEMU versions up to 5.0.0 are affected, specifically the e1000e and vmxnet3 network devices.
How can a malicious user exploit CVE-2020-16092?
A malicious guest user/process could exploit CVE-2020-16092 to abort the QEMU process on the host, causing a denial of service.
Where can I find more information about CVE-2020-16092?
You can find more information about CVE-2020-16092 in the following references: [Reference 1](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1861058), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1861059), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1861060).