CVE-2020-14394

2022-08-1700:00:00

CWE-835

redhat

www.cve.org

5.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.5%

JSON

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "QEMU",
    "versions": [
      {
        "version": "QEMU 6.1.50",
        "status": "affected"
      }
    ]
  }
]