Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2020-14394 — LOW severity vulnerability | Release Alert

CVE-2020-14394

3.2

LOWCVSS v3

Published

August 17, 2022

Affected

10 projects

Assigned by

Red Hat

Severity scale

010

Description

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

qemu-project/qemu

GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

= 6.1.50NVD

qemu/qemu

GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.

= 6.1.50NVD

More on this CVE

NVD↗GitHub Advisory↗

bonzini/qemu

GitHubMy QEMU tree

= 6.1.50NVD

birkelund/qemu

= 6.1.50NVD

thuth/qemu

GitLabQEMU mirror for GitLab CI: Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

= 6.1.50NVD