The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 7, 2016 |
| Suse | — | Upgrade qemu-armUpgrade qemu-microvmUpgrade qemuUpgrade qemu-seabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-ui-openglUpgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-s390Upgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-chardev-baumUpgrade qemu-kvm | Nov 29, 2016 | Nov 29, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-sparc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub