CVE-2017-9375 in QEMU
Summary
QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
06/02/2017
Disclosure
06/16/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 102643 | QEMU XHCI Controller hcd-xhci.c input validation | 20 | Not defined | Official fix | CVE-2017-9375 |