The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | May 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2016 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade xenUpgrade qemu-vgabiosUpgrade xen-kmp-paeUpgrade qemu-kvmUpgrade xen-libs-32bitUpgrade qemu-block-curlUpgrade qemu-x86Upgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade qemu-s390Upgrade xen-toolsUpgrade xen-develUpgrade xen-libsUpgrade xen-doc-htmlUpgrade qemuUpgrade kvmUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-ppc | Jun 13, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-ppc | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub