The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 7, 2016 |
| Suse | — | Upgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemuUpgrade qemu-ksmUpgrade qemu-armUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-microvmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpu-pci | Nov 29, 2016 | Nov 29, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-kvm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub