QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Dec 29, 2016 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common | Dec 29, 2016 | Dec 29, 2016 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-toolsNo solution existsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-common | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-s390xUpgrade xen-kmp-paeUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-ppcUpgrade qemu-block-rbdUpgrade xenUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-microvmUpgrade xen-toolsUpgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade xen-kmp-traceUpgrade qemu-guest-agentUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade xen-libs-32bitUpgrade xen-develUpgrade xen-kmp-defaultUpgrade kvmUpgrade qemu-audio-ossUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-x86Upgrade xen-tools-domUUpgrade qemu-ui-curses | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-sparc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub