---

CVE-2020-14394 - log back

CVE-2020-14394 edited at 29 Dec 2020 11:35:50
Severity	- Medium + Low

CVE-2020-14394 edited at 21 Dec 2020 12:50:45
Severity	- Unknown + Medium
Remote	- Unknown + Local
Type	- Unknown + Denial of service
Description	+ An infinite loop issue was found in the USB xHCI controller emulation of QEMU. Specifically, function xhci_ring_chain_length() in hw/usb/hcd-xhci.c may get stuck while fetching TRBs from guest memory, since the exit conditions of the loop depend on values that are fully controlled by guest. A privileged guest user may exploit this issue to hang the QEMU process on the host, resulting in a denial of service.
References	+ https://bugzilla.redhat.com/show_bug.cgi?id=1908004

CVE-2020-14394 created at 21 Dec 2020 12:49:31
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes