« List of all CVEs

CVE-2020-14394

Published: 8/17/2022 Last updated: 8/4/2024 Reserved: 6/17/2020

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (2)

conf-qemu-img nbd-tool

Products affected (1)

Product Vendor Version
QEMU n/a Google Chrome prior to 59.0.3071.104 for Mac

References (8)