What’s Vulnerable › Vulnerabilities

CVE-2020-11102

• Severity: medium (CVSS 5.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-06 · updated 2026-06-17
• Weakness: CWE-787

Description

hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length.

Affected products

• QEMU: 4.2.0

References

• http://www.openwall.com/lists/oss-security/2020/04/06/1
• http://www.openwall.com/lists/oss-security/2020/04/06/1
• http://www.openwall.com/lists/oss-security/2020/04/06/1
• http://www.openwall.com/lists/oss-security/2020/04/06/1
• https://lists.gnu.org/archive/html/qemu-devel/2020-03/msg08322.html
• https://security.gentoo.org/glsa/202005-02
• http://www.openwall.com/lists/oss-security/2020/04/06/1
• http://www.openwall.com/lists/oss-security/2020/04/06/1
• http://www.openwall.com/lists/oss-security/2020/04/06/1
• http://www.openwall.com/lists/oss-security/2020/04/06/1
• https://lists.gnu.org/archive/html/qemu-devel/2020-03/msg08322.html
• https://security.gentoo.org/glsa/202005-02

Get alerted when CVE-2020-11102 or the next vulnerability affects your stack