NVD

Id
28678  
Name
CVE-2015-8558  
Description
The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2016-05-25  
Seq
2015-8558  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150841 28678 CVE-2015-8558 http://git.qemu.org/?p=qemu.git;a=commit;h=156a2e4dbffa85997636a7a39ef12da6f1b40254  View
150842 28678 CVE-2015-8558 [oss-security] 20151214 Re: CVE request Qemu: usb: infinite loop in ehci_advance_state results in DoS  View
150843 28678 CVE-2015-8558 [oss-security] 20151214 CVE request Qemu: usb: infinite loop in ehci_advance_state results in DoS  View
150844 28678 CVE-2015-8558 80694  View
150845 28678 CVE-2015-8558 https://bugzilla.redhat.com/show_bug.cgi?id=1277983  View
150846 28678 CVE-2015-8558 [qemu-devel] 20151214 [PATCH] ehci: make idt processing more robust  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11866 JVNDB-2015-007186 QEMU の hw/usb/hcd-ehci.c の ehci_process_itd 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU の hw/usb/hcd-ehci.c の ehci_process_itd 関数には、サービス運用妨害 (無限ループおよび CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2015-8558 85783 CVE-2015-8558 28678 4.9 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007186.html 2015-12-15 2016-05-27 View