The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Jun 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 16, 2016 |
| Suse | — | Upgrade xen-doc-htmlUpgrade qemu-block-rbdUpgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade qemu-ppcUpgrade kvmUpgrade qemu-langUpgrade qemu-toolsUpgrade xen-libsUpgrade qemu-kvmUpgrade qemuUpgrade qemu-guest-agentUpgrade xen-tools-domUUpgrade xen-toolsUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade xenUpgrade qemu-vgabiosUpgrade xen-develUpgrade qemu-seabiosUpgrade xen-kmp-traceUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-block-curlUpgrade qemu-ipxeUpgrade xen-kmp-defaultUpgrade xen-kmp-paeUpgrade qemu-s390 | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub