CVE-2017-6505 in QEMU
Summary
The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors.
Reservation
03/06/2017
Disclosure
03/15/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 98170 | QEMU hcd-ohci.c ohci_service_ed_list input validation | 20 | Not defined | Official fix | CVE-2017-6505 |