CVE-2017-5987: Medium severity Qemu Qemu vulnerability
Quick emulator(Qemu) built with the SDHCI device emulation support is vulnerable to an infinite loop issue. It could occur while doing a multi block SDMA transfer via 'sdhcisdmatransfermultiblocks' routine.
A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/14/8
Other sources
The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5987?
CVE-2017-5987 is considered to have a high severity due to its potential to cause denial of service.
How do I fix CVE-2017-5987?
To fix CVE-2017-5987, users should upgrade to a version of QEMU that is patched for this vulnerability.
What causes the infinite loop in CVE-2017-5987?
The infinite loop in CVE-2017-5987 occurs during multi-block SDMA transfers in the sdhci_sdma_transfer_multi_blocks function.
Who is affected by CVE-2017-5987?
Privileged users within guest environments using vulnerable versions of QEMU are affected by CVE-2017-5987.
Can CVE-2017-5987 be exploited remotely?
CVE-2017-5987 requires privileged access to the guest, meaning it cannot be exploited remotely without such access.