CVE-2020-14394

Description

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

CVSS Metrics

• v3.1•LOW•Score: 3.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

EPSS Trends

Current EPSS score: 0.03%• Percentile: 8%

Techniques & Countermeasures

• CWE-835•Loop with Unreachable Exit Condition ('Infinite Loop')

  The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Systems

• fedoraproject•extra_packages_for_enterprise_linux

  7.0

• fedoraproject•fedora

  33 | 37

• qemu•qemu

  6.1.50

• redhat•enterprise_linux

  5.0 | 6.0 | 7.0 | 8.0 | 9.0

• redhat•openstack_platform

  10.0 | 13.0

References (4)

• https://bugzilla.redhat.com/show_bug.cgi?id=1908004
• https://gitlab.com/qemu-project/qemu/-/issues/646
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/
• https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html