An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "6.1.50"
}
],
"cpe": "cpe:2.3:a:qemu:qemu:6.1.50:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "13.0"
}
],
"cpe": "cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"cpe": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "33"
}
]
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "37"
}
],
"cpe": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*"
}
]
}{
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
},
{
"last_affected": "10.0"
},
{
"last_affected": "5.0"
},
{
"last_affected": "6.0"
},
{
"last_affected": "8.0"
},
{
"last_affected": "9.0"
}
],
"cpe": [
"cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:openstack_platform:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*"
]
}