CVE-2020-14394

Published: Aug 17, 2022Modified: Nov 21, 2024

3.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Exploitability: 1.5 / Impact: 1.4

Source: NVD

Description

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

Affected (11)

Products: Qemu: Qemu · Fedoraproject: Extra Packages For Enterprise Linux, Fedora · Redhat: Enterprise Linux, Openstack Platform

Qemu

1 product

Qemu

Fedoraproject

2 products

Extra Packages For Enterprise Linux

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qemu Qemu	Version 6.1.50

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Extra Packages For Enterprise Linux	Version 7.0
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 37

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Openstack Platform	Version 10.0
Redhat Openstack Platform	Version 13.0