Search/CVE-2021-20203
● CVE — Low

CVE-2021-20203

Vendordebian, fedoraproject, qemuProductdebian linux, fedora, qemuDiscoveredFeb 25, 2021UpdatedNov 21, 2024

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

View graph Watch Export
CVSS v3.1
3.2 LOW
EPSS
0.59%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
1
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityLOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
Connections
5 relationships
Timeline
disclosure → media coverage
Feb 25, 2021
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024
Jun 9, 2026
ubuntu.com reports: USN-8412-1: QEMU vulnerabilities