Astra Linux – Vulnerability in Qemu

A divide-by-zero issue was discovered in dwc2handlepacket in hw/usb/hcd-dwc2.c, within the hcd-dwc2 USB host controller emulation in QEMU. A malicious guest could exploit this flaw to crash the QEMU process on the host, resulting in a denial of service...

The vulnerability of the dwc2handle_packet function in the hw/usb/hcd-dwc2.c component of the hardware/USB/HCD-DWC2 emulator for QEMU allows a hacker to trigger a service failure.

The vulnerability of the dwc2handlepacket function in the hw/usb/hcd-dwc2.c component of the QEMU hardware emulation software is related to the lack of checks for division by zero. Exploiting this vulnerability allows a perpetrator to cause a system failure...