The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | May 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2016 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-seabiosUpgrade xen-tools-domUUpgrade xen-libs-32bitUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade xen-kmp-paeUpgrade qemu-s390Upgrade xenUpgrade xen-kmp-defaultUpgrade kvmUpgrade xen-doc-htmlUpgrade xen-develUpgrade qemu-ppcUpgrade qemu-toolsUpgrade xen-libsUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemuUpgrade qemu-ipxe | Jun 13, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-ppc | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub