The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Jun 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 16, 2016 |
| Suse | — | Upgrade xen-libs-32bitUpgrade kvmUpgrade qemuUpgrade xen-doc-pdfUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-sgabiosUpgrade qemu-langUpgrade qemu-kvmUpgrade xen-libsUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade xen-toolsUpgrade xenUpgrade xen-develUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-ipxeUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-traceUpgrade qemu-seabios | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-s390x | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub