The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Feb 27, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 27, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Mar 27, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Mar 27, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 13, 2017 |
| Suse | — | Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemuUpgrade qemu-langUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade xen-tools-domUUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-block-sshUpgrade kvmUpgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade qemu-s390xUpgrade xen-doc-htmlUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-coreUpgrade xenUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-s390Upgrade xen-libsUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-chardev-spiceUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-ui-curses | Feb 28, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-ppc | Apr 21, 2017 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub