Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-14394

Опубликовано: 17 авг. 2022
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS3: 3.2

Описание

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

1:7.2+dfsg-5ubuntu3
esm-infra-legacy/trusty

needed

esm-infra/bionic

needed

esm-infra/focal

not-affected

1:4.2-3ubuntu6.28
esm-infra/xenial

needed

focal

released

1:4.2-3ubuntu6.28
groovy

ignored

end of life
hirsute

ignored

end of life
impish

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

EPSS

Процентиль: 0%
0.00007
Низкий

3.2 Low

CVSS3

Связанные уязвимости

CVSS3: 3.2
redhat
больше 4 лет назад

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

CVSS3: 3.2
nvd
почти 3 года назад

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

CVSS3: 3.2
debian
почти 3 года назад

An infinite loop flaw was found in the USB xHCI controller emulation o ...

CVSS3: 3.2
github
почти 3 года назад

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

CVSS3: 3.2
fstec
почти 3 года назад

Уязвимость эмулятора аппаратного обеспечения QEMU, связанная с циклом с недостижимым условием выхода, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 0%
0.00007
Низкий

3.2 Low

CVSS3

Уязвимость CVE-2020-14394