Infinite loop in QEMU - CVE-2017-8112

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU6941

Infinite loop in QEMU - CVE-2017-8112

Published: June 6, 2017 / Updated: June 8, 2017


Vulnerability identifier: #VU6941
CSH Severity: Low
CVSS v4.0:
CVE-ID: CVE-2017-8112
CWE-ID: CWE-835
Exploitation vector: Adjecent network
Exploit availability: No public exploit available
Vendor: QEMU
Affected software:
QEMU

Detailed vulnerability description

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

How to mitigate CVE-2017-8112

Update to version 2.9.0-r2.

Sources