FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2015-8558

This CVE name corresponds to:

Entered	Topic
2016-01-03	qemu -- denial of service vulnerability in USB EHCI emulation support

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2015-8558 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2015-8558
Phase	Assigned(20151214)

Description

The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.

References

Source	Reference
MLIST	[oss-security] 20151214 CVE request Qemu: usb: infinite loop in ehci_advance_state results in DoS
MLIST	[oss-security] 20151214 Re: CVE request Qemu: usb: infinite loop in ehci_advance_state results in DoS
MLIST	[qemu-devel] 20151214 [PATCH] ehci: make idt processing more robust
CONFIRM	http://git.qemu.org/?p=qemu.git;a=commit;h=156a2e4dbffa85997636a7a39ef12da6f1b40254
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=1277983
BID	80694