Low severity · published Aug 17, 2022
CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring
3.2
CVSS
0.4%
EPSS
No
On KEV
Description
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
5.0; 6.0; 7.0; 8.0; 9.0 · source: NVD
EP
Extra Packages For Enterprise Linux · Fedoraproject
7.0 · source: NVD
FE
Fedora · Fedoraproject
33; 37 · source: NVD
OP
Openstack Platform · Redhat
10.0; 13.0 · source: NVD
QE
Qemu · Qemu
6.1.50 · source: NVD
Affected product
EP
Extra Packages For Enterprise Linux
Fedoraproject
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14394
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1908004
Exploit
https://gitlab.com/qemu-project/qemu/-/issues/646
lists.debian.org
https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/
More from Extra Packages For Enterprise Linux
8.8
CVE-2022-2294
WebRTC Heap Buffer Overflow Vulnerability
9.8
CVE-2023-6395
The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges
9.8
CVE-2023-5550
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the…
9.8
CVE-2023-34152
A vulnerability was found in ImageMagick
9.8
CVE-2022-4170
The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and…