The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Nov 4, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 20, 2016 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade xen-doc-pdfUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-ui-spice-appUpgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-block-sshUpgrade kvmUpgrade xen-toolsUpgrade qemu-s390xUpgrade xen-libsUpgrade qemu-ppcUpgrade qemu-microvmUpgrade xenUpgrade xen-tools-domUUpgrade xen-develUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-lang | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub