CVE-2015-8558

Опубликовано: 23 мая 2016

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.

Ссылки

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254
http://www.debian.org/security/2016/dsa-3469
Third Party Advisory
http://www.debian.org/security/2016/dsa-3470
Third Party Advisory
http://www.debian.org/security/2016/dsa-3471
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/14/16
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/14/9
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/80694
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1277983
Issue Tracking
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.html
Mailing List
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201602-01
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254
http://www.debian.org/security/2016/dsa-3469
Third Party Advisory
http://www.debian.org/security/2016/dsa-3470
Third Party Advisory
http://www.debian.org/security/2016/dsa-3471
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/14/16
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/14/9
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/80694
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1277983
Issue Tracking
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.html
Mailing List
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201602-01
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.5.1.1 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 14%

0.00045

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2015-8558

CVSS3: 5.5

ubuntu

больше 9 лет назад

CVE-2015-8558

redhat

около 10 лет назад

CVE-2015-8558

CVSS3: 5.5

debian

больше 9 лет назад

The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows loca ...

GHSA-84gj-c6vv-gh4q

CVSS3: 5.5

github

больше 3 лет назад

openSUSE-SU-2016:0126-1

suse-cvrf

около 10 лет назад

Security update for xen

EPSS

Процентиль: 14%

0.00045

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-835