Use-After-Free

QEMU 5.0.0 has a use-after-free. The vulnerability exists in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked which allows an attacker to cause an application crash...

CVE-2020-25084

QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...

CVE-2020-25084: Use After Free

QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...

CVE-2017-5973

The xhcikickepctx function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and QEMU process crash via vectors related to control transfer descriptor sequence...

PT-2017-16797

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue allows local guest OS privileged users to cause a denial of service, resulting in an infinite loop and QEMU process crash. This is related to the xhci kick epctx function in...

CVE-2016-8576

The xhciringfetch function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash by leveraging failure to limit the number of link Transfer Request Blocks TRB to process...

CVE-2016-8576: Allocation of Resources Without Limits or Throttling

The xhciringfetch function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash by leveraging failure to limit the number of link Transfer Request Blocks TRB to process...

CVE-2014-5263

vmstatexhcievent in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATEENDOFLIST macro, which allows attackers to cause a denial of service out-of-bounds access, infinite loop, and memory corruption and possibly gain privileges via unspecified vectors...

PT-2014-6377

Name of the Vulnerable Software and Affected Versions QEMU version 1.6.0 Description The issue is related to the vmstate xhci event in hw/usb/hcd-xhci.c, which does not properly terminate the list with the VMSTATE END OF LIST macro. This allows attackers to cause a denial of service, including...

CVE-2014-5263: Improper Restriction of Operations within the Bounds of a Memory Buffer

vmstatexhcievent in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATEENDOFLIST macro, which allows attackers to cause a denial of service out-of-bounds access, infinite loop, and memory corruption and possibly gain privileges via unspecified vectors...