Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-16092

17
FAUCET Score

CVE-2020-16092 is an assertion failure vulnerability in QEMU versions up to 5.0.0, specifically impacting the e1000e and vmxnet3 network devices, and affecting products like Canonical, Debian, and OpenSUSE. A malicious guest user can trigger this flaw, leading to a denial of service on the host by aborting the QEMU process. Rated with a low CVSS score of 3.8, it requires local access and has low attack complexity, resulting in a low impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 5.0.0CPE matchmatch criteria
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
16.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
18.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

CVSS Data

CVSS version used by this source: 3.1

3.8LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
Exploitability Score
2.0
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.38%
Probability of exploitation in next 30 days
EPSS Percentile
30.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0038 is in the 85th percentile among its peer group of 1,511 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (13)

microsoftpatch availablevia msrc
Product: 16843-16820Fixed in: 4.2.0-13
microsoftpatch availablevia msrc
Product: cm1 qemu-kvm 4.2.0-13 on CBL Mariner 1.0Fixed in: 4.2.0-13
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.2.1Fixed in: virt:8.2-8020120201106174547.863bb0db
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: qemu-kvm-ma-10:2.12.0-48.el7_9.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: qemu-kvm-10:1.5.3-175.el7_9.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: virt-devel:rhel-8040020210317013608.9f9e2e7e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: virt:rhel-8040020210317013608.9f9e2e7e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: qemu-kvm-rhev-10:2.12.0-48.el7_9.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: qemu-kvm-rhev-10:2.12.0-48.el7_9.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.3Fixed in: qemu-kvm-rhev-10:2.12.0-48.el7_9.2
View patch
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.2.1Fixed in: virt-devel:8.2-8020120201106174547.863bb0db
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8 Advanced VirtualizationFixed in: virt:8.3/qemu-kvm
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8 Advanced VirtualizationFixed in: virt:8.2/qemu-kvm

Vendor Advisories (2)

microsoft2020-Aug/CVE-2020-16092Low

In QEMU through 5.0.0 an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.

Aug 11, 2020
redhatCVE-2020-16092Low

QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c

Jul 27, 2020

References

lists.opensuse.org / opensuse-security-announce/2020-10/msg00024.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2020/09/msg00013.html
Mailing ListThird Party Advisory
lists.nongnu.org / archive/html/qemu-devel/2020-07/msg07563.html
Mailing ListPatchThird Party Advisory
security.gentoo.org / glsa/202208-27
Third Party Advisory
security.netapp.com / advisory/ntap-20200821-0006
Third Party Advisory
usn.ubuntu.com / 4467-1
Third Party Advisory
debian.org / security/2020/dsa-4760
Third Party Advisory
openwall.com / lists/oss-security/2020/08/10/1
Mailing ListPatchThird Party Advisory