The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Nov 4, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2016 |
| Suse | — | Upgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-toolsUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-htmlUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade xen-libsUpgrade xen-develUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade xen-tools-domUUpgrade xen-doc-pdfUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade xenUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade xen-kmp-traceUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-ksmUpgrade qemu-microvmUpgrade qemu-s390xUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-audio-alsa | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub