CVE-2020-16092: Low severity Qemu Qemu vulnerability
An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service.
Other sources
An assertion failure issue was found in the nettxpktaddrawfragment() function in hw/net/nettxpkt.c. This assertion comes from the code that processes network packets. This code is shared between e1000e, vmxnet3 and apparently a few more devices. A malicious guest user/process could abuse this flaw to abort the QEMU process on the host, resulting in a denial of service condition.
— Red Hat
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in nettxpktaddrawfragment in hw/net/nettxpkt.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/qemu-kvm-mato a version that resolves this vulnerability.Fixed in 10:2.12.0-48.el7_9.2 - Upgrade
Upgrade
redhat/qemu-kvmto a version that resolves this vulnerability.Fixed in 10:1.5.3-175.el7_9.3 - Upgrade
Upgrade
redhat/qemu-kvm-rhevto a version that resolves this vulnerability.Fixed in 10:2.12.0-48.el7_9.2 - Upgrade
Upgrade
redhat/qemu-kvmto a version that resolves this vulnerability.Fixed in 5.1.0 - Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:5.2+dfsg-11+deb11u3Fixed in 1:5.2+dfsg-11+deb11u4Fixed in 1:7.2+dfsg-7+deb12u13Fixed in 1:10.0.0+ds-2
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-16092.
What is the severity of CVE-2020-16092?
The severity of CVE-2020-16092 is low.
Which software is affected by CVE-2020-16092?
QEMU versions up to 5.0.0 are affected, specifically the e1000e and vmxnet3 network devices.
How can a malicious user exploit CVE-2020-16092?
A malicious guest user/process could exploit CVE-2020-16092 to abort the QEMU process on the host, causing a denial of service.
Where can I find more information about CVE-2020-16092?
You can find more information about CVE-2020-16092 in the following references: [Reference 1](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1861058), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1861059), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1861060).