Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 736605 (CVE-2020-16092) - QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c (CVE-2020-16092)
Summary: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/...
Status: UNCONFIRMED
Alias: CVE-2020-16092
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://seclists.org/oss-sec/2020/q3/106
Whiteboard: B3 [upstream/ebuild]?
Keywords:
Depends on:
Blocks:
 
Reported: 2020-08-10 11:04 UTC by filip ambroz
Modified: 2020-08-10 18:24 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description filip ambroz 2020-08-10 11:04:06 UTC
An assertion failure issue was found in QEMU in the network packet
processing component. This issue affects the "e1000e" and "vmxnet3"
network devices. This flaw allows a malicious guest user or process to
abort the QEMU process on the host, resulting in a denial of service
condition.

Upstream patch: https://git.qemu.org/?p=qemu.git;a=commit;h=035e69b063835a5fd23cacabd63690a3d84532a8

Links:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16092
https://nvd.nist.gov/vuln/detail/CVE-2020-16092
https://security-tracker.debian.org/tracker/CVE-2020-16092
https://bugzilla.redhat.com/show_bug.cgi?id=1860283
Comment 1 John Helmert III gentoo-dev Security 2020-08-10 16:30:21 UTC
(In reply to filip ambroz from comment #0)
> An assertion failure issue was found in QEMU in the network packet
> processing component. This issue affects the "e1000e" and "vmxnet3"
> network devices. This flaw allows a malicious guest user or process to
> abort the QEMU process on the host, resulting in a denial of service
> condition.
> 
> Upstream patch:
> https://git.qemu.org/?p=qemu.git;a=commit;
> h=035e69b063835a5fd23cacabd63690a3d84532a8

This should be in 5.1:

qemu $ git tag --contains 035e69b063835
v5.1.0-rc3
Comment 2 Sergei Trofimovich gentoo-dev 2020-08-10 18:24:46 UTC
We'll pull it in with 5.1.0 release.