The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemu-sbrunoUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | May 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 10, 2015 |
| Suse | — | Upgrade xen-develUpgrade qemu-toolsUpgrade xen-doc-pdfUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-chardev-spiceUpgrade qemuUpgrade xen-tools-domUUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade xen-doc-htmlUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-audio-ossUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-x86Upgrade xen-libs-32bitUpgrade qemu-vgabiosUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-seabiosUpgrade xen-kmp-traceUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-microvmUpgrade xen-kmp-paeUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-ppcUpgrade qemu-block-iscsiUpgrade xen-toolsUpgrade xenUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-ui-gtk | Mar 24, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-sparc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub