Related Vulnerabilities: CVE-2021-20257  

An infinite loop issue was found in the e1000 NIC emulator of the QEMU. It occurs while processing transmit (tx) descriptors in process_tx_desc, if various descriptor fields are initialised with invalid values. A guest may use this flaw to consume CPU cycles on the host resulting in a denial of service (DoS) scenario.

Severity Low

Remote No

Type Denial of service

Description

An infinite loop issue was found in the e1000 NIC emulator of the QEMU. It occurs while processing transmit (tx) descriptors in process_tx_desc, if various descriptor fields are initialised with invalid values. A guest may use this flaw to consume CPU cycles on the host resulting in a denial of service (DoS) scenario.

AVG-1308 qemu 5.2.0-3 Medium Vulnerable

https://bugzilla.redhat.com/show_bug.cgi?id=1930087
https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg03595.html