CVE-2017-5973: Medium severity Qemu Qemu vulnerability
Quick emulator(Qemu) built with the USB xHCI controller emulator support is vulnerable to an infinite loop issue. It could occur while processing control transfer descriptors' sequence in xhcikickepctx.
A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/13/11
Other sources
The xhcikickepctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5973?
CVE-2017-5973 has been classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2017-5973?
To fix CVE-2017-5973, upgrade QEMU to version 2.8.2 or later.
Which versions of QEMU are affected by CVE-2017-5973?
CVE-2017-5973 affects QEMU versions up to and including 2.8.1.1.
What type of attack does CVE-2017-5973 facilitate?
CVE-2017-5973 allows local guest OS privileged users to cause a denial of service through an infinite loop.
What is the impact of CVE-2017-5973 on affected systems?
The impact of CVE-2017-5973 on affected systems includes potential crashes of the QEMU process, resulting in service downtime.