The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Oct 1, 2024 | Mar 15, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 19, 2019 | Mar 15, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Jun 17, 2020 | Mar 15, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2017 |
| Suse | — | Upgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-block-iscsiUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade xen-libsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-kvmUpgrade xen-libs-32bitUpgrade qemu-block-rbdUpgrade xen-doc-pdfUpgrade qemu-langUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemuUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade xen-develUpgrade kvm | Apr 11, 2017 | Mar 15, 2017 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-s390x | Apr 21, 2017 | Mar 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub