CVE-2020-16092

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.

• CWE-617

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/08/10/1Mailing List, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/09/msg00013.htmlMailing List, Third Party Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.htmlMailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200821-0006/Third Party Advisory
• https://usn.ubuntu.com/4467-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4760Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/08/10/1Mailing List, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/09/msg00013.htmlMailing List, Third Party Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.htmlMailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200821-0006/Third Party Advisory
• https://usn.ubuntu.com/4467-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4760Third Party Advisory

Published

Aug 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1607Insufficient Cross-Site Scripting (XSS) protection in J-Web …6.1
• CVE-2020-1608Receipt of a specific MPLS or IPv6 packet on the core facing…7.5
• CVE-2020-16087An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8…8.6
• CVE-2020-16088iked in OpenIKED, as used in OpenBSD through 6.7, allows aut…9.8
• CVE-2020-1609When a device using Juniper Network's Dynamic Host Configura…8.8
• CVE-2020-16091Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-16093In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity …7.5
• CVE-2020-16094In imap_scan_tree_recursive in Claws Mail through 3.17.6, a …7.5
• CVE-2020-16095The dlf (aka Kitodo.Presentation) extension before 3.1.2 for…6.1
• CVE-2020-16096In Gallagher Command Centre versions 8.10 prior to 8.10.1134…7.7
• CVE-2020-16097On controllers running versions of v8.20 prior to vCR8.20.20…4.6
• CVE-2020-16098It is possible to enumerate access card credentials via an u…9.8