CVE-2020-15859

Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0

Description The issue is related to a use-after-free in the e1000e core of QEMU's hardware emulation, specifically in the hw/net/e1000e core.c file. This can be triggered by a guest OS user sending an e1000e packet with its data address set to the e1000e's MMIO address, potentially leading to a denial of service.

Recommendations For QEMU version 4.2.0, consider disabling the e1000e core functionality until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.