CVE-2020-10761CWE-617

An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1

Medium · published June 9, 2020

CVSS v3.1
5.0
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01796 · 78.3th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2020-06-09T12:07Z
EPSS history
Timeline
  • 09 JUN 12:07Z
    An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1
    cvelistv5