An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jun 9, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | Jun 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Nov 3, 2020 | Jun 9, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 9, 2020 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-redirectUpgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-linux-userUpgrade qemu-seabiosUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-appUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade qemu-block-dmgUpgrade qemu-block-nfsUpgrade qemu-testsuiteUpgrade qemu-chardev-spiceUpgrade qemu-microvmUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-extraUpgrade qemu-ui-sdlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-sgabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-s390Upgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemu-audio-sdl | Jul 29, 2020 | Jun 9, 2020 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemuUpgrade qemu-system-x86-xenUpgrade qemu-system-x86-microvmUpgrade qemu-system-s390xUpgrade qemu-system-mips | Aug 20, 2020 | Jun 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub