A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability.

🗓️ 10 Mar 2023 08:00:00Reported by MicrosoftType

Stack overflow from infinite recursion in QEMU eepro100 i8255x emulator during controller processing causes denial of service.

Reporter	Title	Published	Views	Family All 123
ATTACKERKB	CVE-2021-20255	9 Mar 202120:15	–	attackerkb
AlpineLinux	CVE-2021-20255	9 Mar 202119:14	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Qemu	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the eepro100 i8255x hardware emulation software by QEMU allows a hacker to induce a service failure.	12 Sep 202200:00	–	bdu_fstec
CBLMariner	CVE-2021-20255 affecting package qemu for versions less than 6.2.0-18	22 Apr 202515:08	–	cbl_mariner
CBLMariner	CVE-2021-20255 affecting package qemu-kvm 4.2.0-48	6 Apr 202123:50	–	cbl_mariner
CBLMariner	CVE-2021-20255 affecting package qemu for versions less than 6.2.0-2	3 Jun 202217:54	–	cbl_mariner
Chainguard	CVE-2021-20255 vulnerabilities	25 Jun 202620:37	–	cgr
Circl	CVE-2021-20255	9 Mar 202122:52	–	circl
CNNVD	QEMU Security Vulnerabilities	25 Feb 202100:00	–	cnnvd