Lucene search
GoogleOSV:CVE-2021-20257HistoryMar 16, 2022 - 3:15 p.m.
CVE-2021-20257
2022-03-1615:15:09
Google
osv.dev
11
qemu
e1000 nic
infinite loop
denial of service
system availability
vulnerability
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
References
bugzilla.redhat.com/show_bug.cgi?id=1930087
github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8
lists.debian.org/debian-lts-announce/2022/09/msg00008.html
lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html
security.gentoo.org/glsa/202208-27
security.netapp.com/advisory/ntap-20220425-0003/
www.openwall.com/lists/oss-security/2021/02/25/2
Related
attackerkb
attackerkb
CVE-2021-20257
2020-12-17 00:00:00
nessus
nessus
Amazon Linux 2 : qemu (ALAS-2023-2060)
2023-06-05 00:00:00
Oracle Linux 7 : qemu (ELSA-2021-9335)
2021-06-28 00:00:00
SUSE SLES12 Security Update : xen (SUSE-SU-2021:1252-1)
2021-04-20 00:00:00
amazon
amazon
Low: qemu
2023-05-25 17:41:00
cbl_mariner
cbl_mariner
CVE-2021-20257 affecting package qemu-kvm 4.2.0-38
2022-05-26 19:04:44
CVE-2021-20257 affecting package qemu for versions less than 6.2.0-2
2022-06-03 17:54:21
nvd
nvd
CVE-2021-20257
2022-03-16 15:15:09
prion
prion
Denial of service
2022-03-16 15:15:00
alpinelinux
alpinelinux
CVE-2021-20257
2022-03-16 15:15:09
redhatcve
redhatcve
CVE-2021-20257
2021-02-22 08:16:14
cvelist
cvelist
CVE-2021-20257
2022-03-16 14:12:26
cve
cve
CVE-2021-20257
2022-03-16 15:15:09
ubuntucve
ubuntucve
CVE-2021-20257
2021-02-23 00:00:00
debiancve
debiancve
CVE-2021-20257
2022-03-16 15:15:09
veracode
veracode
Denial Of Service (DoS)
2021-03-17 23:46:25
citrix
citrix
Citrix Hypervisor Security Update
2021-06-23 11:06:42
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:1252-1)
2021-04-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:14702-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1251-1)
2021-04-26 00:00:00
rocky
rocky
virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
redhat
redhat
(RHSA-2022:0081) Low: virt:av and virt-devel:av security and bug fix update
2022-01-11 09:12:04
(RHSA-2021:5238) Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
osv
osv
Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
qemu - security update
2021-04-10 00:00:00
oraclelinux
oraclelinux
virt:ol and virt-devel:rhel security update
2021-12-22 00:00:00
qemu security update
2021-06-28 00:00:00
qemu security update
2022-01-04 00:00:00
almalinux
almalinux
Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
debian
debian
[SECURITY] [DLA 2623-1] qemu security update
2021-04-10 21:21:02
[SECURITY] [DLA 3099-1] qemu security update
2022-09-05 03:28:05
suse
suse
Security update for qemu (moderate)
2021-07-14 00:00:00
Security update for qemu (important)
2021-04-23 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2021-07-15 00:00:00
gentoo
gentoo
QEMU: Multiple Vulnerabilities
2022-08-14 00:00:00