The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Oct 1, 2024 | Mar 15, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 19, 2019 | Mar 15, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Jun 17, 2020 | Mar 15, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2017 |
| Suse | — | Upgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade qemu-toolsUpgrade qemu-audio-paUpgrade qemu-chardev-spiceUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade xen-develUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade kvmUpgrade qemu-audio-spiceUpgrade xenUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-audio-ossUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade xen-doc-htmlUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade qemu-ui-openglUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade xen-kmp-paeUpgrade qemu-ksmUpgrade qemu-microvmUpgrade xen-tools-domUUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ui-cursesUpgrade xen-libsUpgrade qemu-block-iscsiUpgrade qemu-skiboot | Apr 11, 2017 | Mar 15, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-x86 | Apr 21, 2017 | Mar 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub