QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Dec 29, 2016 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 29, 2016 | Dec 29, 2016 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoNo solution exists | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade xen-kmp-paeUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade xenUpgrade xen-kmp-traceUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-microvmUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade xen-develUpgrade xen-tools-domUUpgrade xen-libsUpgrade kvmUpgrade xen-kmp-defaultUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-armUpgrade qemu-x86Upgrade xen-tools-xendomains-wait-diskUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade xen-libs-32bit | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-misc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub