Wind River Support Network

HomeDefectsLIN6-10910
Fixed

LIN6-10910 : Security Advisory - qemu - CVE-2015-8345

Created: Feb 19, 2016    Updated: Dec 3, 2018
Resolved Date: Mar 4, 2016
Found In Version: 6.0
Fix Version: 6.0.0.29
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

An infinite-loop flaw was discovered in the QEMU emulator built with i8255x (PRO100) emulation support. When processing a chain of commands located in the Command Block List(CBL), each Command Block(CB) points to the next command in the list. If the link to the next CB pointed to the same block or if there was a closed loop in the chain, an infinite loop would execute the same command over and over again. A privileged user inside the guest could use this flaw to crash the QEMU instance, resulting in denial of service.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8345

Other Downloads


Live chat
Online