Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2021-20203 — LOW severity vulnerability | Release Alert

CVE-2021-20203

3.2

LOWCVSS v3

Published

February 25, 2021

CVSS v2

2.1 LOW

Affected

10 projects

Assigned by

Red Hat

Severity scale

010

Description

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

qemu-project/qemu

GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

<= 5.2.0NVD

qemu/qemu

GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.

<= 5.2.0NVD

More on this CVE

NVD↗GitHub Advisory↗

bonzini/qemu

GitHubMy QEMU tree

<= 5.2.0NVD

birkelund/qemu

<= 5.2.0NVD

thuth/qemu

GitLabQEMU mirror for GitLab CI: Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

<= 5.2.0NVD