Not rated
CVE-2020-14394 An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the…
Description
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QEMU | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- gitlab.com gitlab.com
- FEDORA-2022-22b1f8dae2 lists.fedoraproject.org
- [debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of QEMU
The 60 CVEs of QEMU →
CVE-2023-2680
This CVE exists because of an incomplete fix for CVE-2021-3750
7.5
High
CVE-2023-3301
A flaw was found in QEMU
5.6
Medium
CVE-2023-3180
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in…
6.0
Medium
CVE-2023-1386
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU
3.3
Low