5.3
CVSSv3

CVE-2020-25625

Published: 25/09/2020 Updated: 23/09/2022
CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4
CVSS v3 Base Score: 5.3 | Impact Score: 4 | Exploitability Score: 0.8
VMScore: 418
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

qemu qemu 5.0.0

debian debian linux 9.0

debian debian linux 10.0

Vendor Advisories

Debian Bug report logs - #970542 CVE-2020-25625 Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 18 Sep 2020 09:15:08 UTC Severity: important Tags: security, u ...
An infinite loop issue was found in the USB OHCI controller emulator of QEMU It could occur while servicing OHCI isochronous transfer descriptors (TD) in ohci_service_iso_td routine, as it retires a TD if it has passed its time frame While doing so it does not check if the TD was already processed ones and holds an error code in TD_CC It may hap ...