CVE-2021-20203

2021-02-2519:09:46

CWE-190

redhat

www.cve.org

qemu

vmxnet3

integer overflow

nic emulator

dos

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

22.8%

JSON

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

CNA Affected

[
  {
    "product": "qemu",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "versions up to v5.2.0"
      }
    ]
  }
]