CVE-2020-27617

—

CVSS 3.1

6.5 medium

EPSS

3%p84

Published

Nov 6, 2020 (Nov 6, 2020)

Modified

Jun 17, 2026

Description

eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol.

Vendors: qemu debian
Products: qemu, debian linux
Weakness: CWE-617
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.