CVE-2020-10761

An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.

• CWE-617
• CWE-617

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10761Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/202011-09Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200731-0001/Third Party Advisory
• https://usn.ubuntu.com/4467-1/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/06/09/1Mailing List, Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10761Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/202011-09Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200731-0001/Third Party Advisory
• https://usn.ubuntu.com/4467-1/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/06/09/1Mailing List, Patch, Third Party Advisory

Published

Jun 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10756An out-of-bounds read vulnerability was found in the SLiRP n…6.5
• CVE-2020-10757A flaw was found in the Linux Kernel in versions after 4.5-r…7.8
• CVE-2020-10758A vulnerability was found in Keycloak before 11.0.1 where Do…7.5
• CVE-2020-10759A PGP signature bypass flaw was found in fwupd (all versions…6
• CVE-2020-1076A denial of service vulnerability exists when Windows improp…5.5
• CVE-2020-10760A use-after-free flaw was found in all samba LDAP server ver…6.5
• CVE-2020-10762An information-disclosure flaw was found in the way that glu…5.5
• CVE-2020-10763An information-disclosure flaw was found in the way Heketi b…5.5
• CVE-2020-10764Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10765Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10766A logic bug flaw was found in Linux kernel before 5.8-rc1 in…5.5
• CVE-2020-10767A flaw was found in the Linux kernel before 5.8-rc1 in the i…5.5