CVE-2015-8558: Medium severity qemu vulnerability
Last updated 24 July 2024
Other sources
Qemu emulator built with the USB EHCI emulation support is vulnerable to an infinite loop issue. It occurs during communication between host controller interface(EHCI) and a respective device driver. These two communicate via a isochronous transfer descriptor list(iTD) and an infinite loop unfolds if there is a closed loop in this list.
A privileges used inside guest could use this flaw to consume excessive CPU cycles & resources on the host.
Upstream fix: ------------- -> git.qemu.org/?p=qemu.git;a=commit;h=156a2e4dbffa85997636a7a39ef12da6f1b40254
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2015/12/14/16
— Red Hat
The ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2015-8558?
CVE-2015-8558 is a vulnerability that allows local guest OS administrators to cause a denial of service in QEMU via a circular isochronous transfer descriptor list.
Which software versions are affected by CVE-2015-8558?
CVE-2015-8558 affects QEMU version 2.0.0+dfsg-2ubuntu1.22, 1:2.3+dfsg-5ubuntu9.2, qemu-kvm version 1.0+, and other Debian versions.
What is the severity of CVE-2015-8558?
CVE-2015-8558 has a low severity level.
How can I fix CVE-2015-8558?
To fix CVE-2015-8558, update QEMU to version 2.0.0+dfsg-2ubuntu1.22 or higher, 1:2.3+dfsg-5ubuntu9.2 or higher, or use the latest available version for qemu-kvm.
Where can I find more information about CVE-2015-8558?
You can find more information about CVE-2015-8558 on the following websites: http://www.securityfocus.com/bid/80694, http://www.debian.org/security/2016/dsa-3469, http://www.debian.org/security/2016/dsa-3470