Unrated
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This...
CVE-2020-14394
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-14394 qemu Fixed in: 1:5.2+dfsg-11+deb11u3
- Ubuntu UBUNTU-CVE-2020-14394 qemu Fixed in: 2.0.0+dfsg-2ubuntu1.47+esm6
Original description The description as published by the source.
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
References
- patch gitlab.com
- report bugzilla.redhat.com
- web lists.debian.org
- web lists.fedoraproject.org