The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Oct 1, 2024 | Mar 15, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 19, 2019 | Mar 15, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jun 17, 2020 | Mar 15, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2017 |
| Suse | — | Upgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-microvmUpgrade qemu-armUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-skibootUpgrade xen-libsUpgrade qemu-block-iscsiUpgrade xen-kmp-defaultUpgrade qemu-x86Upgrade qemu-ui-openglUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-audio-alsaUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade xen-doc-pdfUpgrade qemu-block-rbdUpgrade qemu-sgabiosUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade kvmUpgrade qemu-kvmUpgrade qemu-hw-display-qxlUpgrade qemu-s390xUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade xen-develUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade xen-toolsUpgrade qemu-audio-spiceUpgrade xenUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-ui-spice-core | Apr 11, 2017 | Mar 15, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system | Apr 21, 2017 | Mar 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub