Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-84158
HistoryAug 31, 2022 - 12:00 a.m.

QEMU Denial of Service Vulnerability (CNVD-2022-84158)

2022-08-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
qemu
denial of service
ahci controller
deadlock
software reset
fis messages
client
attacker
exploit

EPSS

0

Percentile

12.6%

QEMU (Quick Emulator) is a set of emulated processor software from Fabrice Bellard, a French personal developer. QEMU has a denial of service vulnerability, which stems from a deadlock problem in its AHCI controller during a software reset (ahci_reset_port) while processing host-to-device registration FIS (Frame Information Structure) messages from a client, allowing a privileged user in the client to hang the QEMU process on the host, which could be exploited by an attacker to cause a denial of service. exploit this vulnerability to cause a denial of service.

EPSS

0

Percentile

12.6%