The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Oct 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Nov 19, 2019 | Oct 5, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 21, 2016 |
| Suse | — | Upgrade kvmUpgrade qemu-microvmUpgrade qemu-s390xUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-gtkUpgrade qemu-hw-display-qxlUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-xendomains-wait-diskUpgrade xen-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-kvmUpgrade qemu-x86Upgrade xen-libs-32bitUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade qemu-ipxeUpgrade xen-libsUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-skibootUpgrade xen | Nov 23, 2016 | Oct 5, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64 | Nov 9, 2016 | Oct 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub