A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 9, 2021 |
| Debian | — | No solution existsUpgrade qemu | Apr 12, 2021 | Mar 9, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2021 |
| Suse | — | Upgrade qemu-hw-usb-smartcardUpgrade xenUpgrade qemu-audio-alsaUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade qemu-block-dmgUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade xen-kmp-defaultUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-sdlUpgrade qemu-block-iscsiUpgrade qemu-ui-cursesUpgrade xen-libs-32bitUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-chardev-baumUpgrade qemu-testsuiteUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-block-sshUpgrade qemu-extraUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-ivshmem-toolsUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-s390xUpgrade xen-tools-domuUpgrade qemu-linux-userUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade qemuUpgrade qemu-audio-paUpgrade xen-develUpgrade qemu-block-glusterUpgrade xen-toolsUpgrade qemu-ui-sdlUpgrade qemu-block-nfsUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxl | Aug 21, 2021 | Mar 9, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub