A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 9, 2021 |
| Debian | — | Upgrade qemuNo solution exists | Apr 12, 2021 | Mar 9, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2021 |
| Suse | — | Upgrade qemu-block-nfsUpgrade qemu-ppcUpgrade qemu-block-glusterUpgrade xen-develUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade qemu-linux-userUpgrade qemu-ivshmem-toolsUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-ui-sdlUpgrade qemu-toolsUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade xen-libsUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-armUpgrade xen-tools-domuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-testsuiteUpgrade qemu-chardev-baumUpgrade qemu-audio-sdlUpgrade qemu-ui-gtkUpgrade xen-libs-32bitUpgrade qemu-block-dmgUpgrade qemu-hw-usb-smartcardUpgrade qemu-chardev-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade xen-kmp-defaultUpgrade xenUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-extraUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-langUpgrade qemu-vhost-user-gpuUpgrade qemu-seabiosUpgrade qemu-ui-spice-coreUpgrade xen-kmp-pae | Aug 21, 2021 | Mar 9, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub