CVE-2021-20257

Katalog CVE

CVSS 6.5 · Medium EPSS 0,37%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada qemu, fedoraproject fedora +6 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Rincian

Terbit di NVD

16 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 29,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html mailing list · patch · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1930087 issue tracking · patch · advisory pihak ketiga
• https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8 patch · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2021/02/25/2 mailing list · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-27 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220425-0003/ advisory pihak ketiga