VulnSocial

CVE-2020-1711General(debian / debian_linux)

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.

debian CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-122CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • enterprise_linux
  • leap
  • openstack

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
debianopensuseqemuredhat
Products
debian_linuxenterprise_linuxleapopenstackqemu

6 versions affected across 5 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-09: 1Technical Details · 2026-06-09: 106-09
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatCluster@threatcluster
    General

    Ubuntu’s USN-8412-1 advisory details QEMU vulnerabilities including CVE-2020-1711 exposing Ubuntu 14.04 LTS systems to remote denial of service and arbitrary code execution via malformed iSCSI responses. https://threatcluster.io/cluster/multiple-qemu-vulnerabilities-affecting-ubuntu-systems-53301c80

    Post summary

    The advisory highlights CVE‑2020‑1711 as a QEMU flaw that allows remote denial of service and arbitrary code execution on Ubuntu 14.04 LTS via malformed iSCSI responses, but offers no PoC, exploit code, or patch details.

    0000031
    318 followersView on X
CPE platform detail8 entries

8 of 8 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux8.0--
OSdebiandebian_linux9.0--
OSopensuseleap15.1--
Appqemuqemu---
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
Appredhatopenstack10--
Appredhatopenstack13--

Explore more

Back to dashboarddebian CVEsopensuse CVEsqemu CVEsdebian_linux vulnerabilities