Wind River Support Network


LIN6-11931 : Security Advisory - qemu - CVE-2016-8576

Created: Nov 13, 2016    Updated: Oct 21, 2020
Resolved Date: Nov 14, 2016
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.<a href=>CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')</a>

Other Downloads

Live chat