QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Dec 29, 2016 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-tools | Dec 29, 2016 | Dec 29, 2016 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsNo solution existsUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfo | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade xenUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-vgabiosUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade xen-kmp-paeUpgrade qemu-block-rbdUpgrade xen-kmp-traceUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade xen-tools-xendomains-wait-diskUpgrade qemuUpgrade xen-doc-pdfUpgrade xen-kmp-defaultUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade xen-libs-32bitUpgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade xen-develUpgrade qemu-ui-opengl | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-sparc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub