Vulnerability CVE-2016-4037: Information

Description

The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.

Severity: MEDIUM (6.0) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2016-4037
Published: May 23, 2016
Modified: Feb. 13, 2023
Error type identifier: CWE-400

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
qemusisyphus2.6.0-alt18.2.2-alt3ALT-PU-2016-1565-1164723Fixed
qemup102.6.0-alt18.2.2-alt0.p10.1ALT-PU-2016-1565-1164723Fixed
qemup92.6.0-alt15.2.0-alt6ALT-PU-2016-1565-1164723Fixed
qemup82.6.0-alt12.11.0-alt0.M80P.4ALT-PU-2016-1596-1165738Fixed
qemuc10f12.6.0-alt18.0.4-alt1.p10ALT-PU-2016-1565-1164723Fixed
qemuc9f22.6.0-alt15.2.0-alt6.c9.1ALT-PU-2016-1565-1164723Fixed
qemuc72.5.1.1-alt0.M70C.12.5.1.1-alt0.M70C.5ALT-PU-2016-2004-1169626Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
[oss-security] 20160418 Re: Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process
  • Mailing List
[qemu-devel] 20160418 [PATCH 1/2] ehci: apply limit to itd/sidt descriptors
  • Mailing List
  • Patch
  • Vendor Advisory
FEDORA-2016-35d7b09908
  • Mailing List
  • Third Party Advisory
[oss-security] 20160418 Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process
  • Mailing List
FEDORA-2016-48e72b7bc5
  • Mailing List
  • Third Party Advisory
[qemu-devel] 20160418 Re: [PATCH 1/2] ehci: apply limit to itd/sidt descriptors
  • Mailing List
  • Vendor Advisory
FEDORA-2016-75063477ca
  • Mailing List
  • Third Party Advisory
USN-2974-1
  • Third Party Advisory
86283
  • Third Party Advisory
  • VDB Entry
[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update
  • Mailing List
  • Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1ae3f2f178087711f9591350abad133525ba93f2

      1. Configuration 1

        cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
        cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
        cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

        Configuration 2

        cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
        cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
        cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
        cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

        Configuration 3

        cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
        End including
        2.5.1
        cpe:2.3:a:qemu:qemu:2.6.0:rc1:*:*:*:*:*:*
        cpe:2.3:a:qemu:qemu:2.6.0:rc2:*:*:*:*:*:*
        cpe:2.3:a:qemu:qemu:2.6.0:rc0:*:*:*:*:*:*

        Configuration 4

        cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
    Version: v24.4.2
    Back to top