The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 27, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 27, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Mar 27, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Mar 27, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 13, 2017 |
| Suse | — | Upgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade xenUpgrade xen-libs-32bitUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade xen-kmp-paeUpgrade xen-doc-htmlUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade xen-develUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade xen-toolsUpgrade xen-tools-domUUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-langUpgrade qemu-x86Upgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-ppc | Feb 28, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-x86 | Apr 21, 2017 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub