A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Jun 2, 2021 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-system-x86-coreUpgrade nbdkit-develUpgrade libvirt-adminUpgrade libguestfs-benchmarkingUpgrade libguestfs-man-pages-jaUpgrade libguestfsUpgrade qemu-guest-agentUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade hivexUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemu-kvm-block-sshUpgrade libguestfs-gobject-develUpgrade nbdkit-gzip-pluginUpgrade libguestfs-rsyncUpgrade qemu-kvm-block-curlUpgrade nbdkit-python-pluginUpgrade libvirt-clientUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-rbdUpgrade nbdkit-bash-completionUpgrade qemu-commonUpgrade libguestfs-man-pages-ukUpgrade nbdkit-linuxdisk-pluginUpgrade ruby-libguestfsUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-glusterUpgrade python3-libvirtUpgrade nbdkit-curl-pluginUpgrade hivex-develUpgrade libguestfs-winsupportUpgrade libiscsiUpgrade libguestfs-gobjectUpgrade qemu-kvmUpgrade netcf-libsUpgrade libnbdUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-bash-completionUpgrade libiscsi-utilsUpgrade libvirt-lock-sanlockUpgrade nbdkit-basic-pluginsUpgrade libvirt-develUpgrade libguestfs-toolsUpgrade libiscsi-develUpgrade seabios-binUpgrade qemu-kvm-block-glusterUpgrade qemu-system-aarch64Upgrade nbdkitUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade superminUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libguestfs-javaUpgrade virt-v2vUpgrade virt-dibUpgrade seavgabios-binUpgrade python3-libguestfsUpgrade perl-Sys-GuestfsUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-kvmUpgrade libvirtUpgrade qemu-block-glusterUpgrade python3-libnbdUpgrade nbdkit-ssh-pluginUpgrade libvirt-nssUpgrade netcf-develUpgrade supermin-develUpgrade nbdkit-example-pluginsUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-commonUpgrade libnbd-develUpgrade libguestfs-rescueUpgrade ivshmem-toolsUpgrade seabiosUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-develUpgrade sgabios-binUpgrade qemu-system-x86Upgrade libvirt-daemon-driver-networkUpgrade sgabiosUpgrade libguestfs-develUpgrade nbdfuseUpgrade libguestfs-gfs2Upgrade qemuUpgrade netcfUpgrade libvirt-docsUpgrade libguestfs-xfsUpgrade libguestfs-javadocUpgrade python3-hivexUpgrade lua-guestfsUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libguestfs-inspect-iconsUpgrade qemu-system-aarch64-coreUpgrade perl-hivexUpgrade ruby-hivex | Jun 29, 2021 | Oct 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub