The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | May 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2016 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-sgabiosUpgrade xen-kmp-defaultUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-s390Upgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade xenUpgrade qemu-block-rbdUpgrade xen-kmp-paeUpgrade qemu-block-curlUpgrade qemu-toolsUpgrade kvmUpgrade qemu-ipxeUpgrade qemu-langUpgrade xen-doc-htmlUpgrade qemuUpgrade qemu-guest-agentUpgrade xen-develUpgrade xen-libsUpgrade qemu-ppc | Jun 13, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-s390x | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub