The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Jun 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 16, 2016 |
| Suse | — | Upgrade qemu-x86Upgrade xen-libsUpgrade qemu-vgabiosUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade qemu-ppcUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade qemu-guest-agentUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade xenUpgrade xen-develUpgrade kvmUpgrade qemuUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-langUpgrade xen-kmp-traceUpgrade qemu-ipxeUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-s390Upgrade xen-tools-xendomains-wait-disk | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-arm | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub