QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Dec 29, 2016 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 29, 2016 | Dec 29, 2016 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-imgNo solution existsUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade qemuUpgrade xen-doc-pdfUpgrade qemu-chardev-spiceUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemu-ui-cursesUpgrade xen-doc-htmlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-libsUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-defaultUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-ui-openglUpgrade xen-develUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade xen-kmp-paeUpgrade qemu-s390Upgrade xen-kmp-traceUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-microvmUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade xen-toolsUpgrade xenUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-vgabios | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system | Feb 3, 2016 | Feb 3, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub