CVE-2021-20257
published 2022-03-16CVE-2021-20257: An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if…
medium6.5CVSS 3.1
AVLACLPRLUINSCCNINAH
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | qemu | < qemu 1:5.2+dfsg-9 (bookworm) | qemu 1:5.2+dfsg-9 (bookworm) |
| fedoraproject | fedora | — | — |
| msrc | cbl2_qemu_6.2.0-2_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_1.0_arm | — | — |
| msrc | cbl_mariner_1.0_x64 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| msrc | cm1_qemu-kvm_4.2.0-39_on_cbl_mariner_1.0 | — | — |
| qemu | qemu | < 6.2.0 | 6.2.0 |
| qemu | qemu | — | — |
| qemu | qemu | >= 0 < 1:5.2+dfsg-9 | 1:5.2+dfsg-9 |
| qemu | qemu | >= 0 < 1:5.2+dfsg-9 | 1:5.2+dfsg-9 |
| qemu | qemu | >= 0 < 1:5.2+dfsg-9 | 1:5.2+dfsg-9 |
| qemu | qemu | >= 0 < 1:5.2+dfsg-9 | 1:5.2+dfsg-9 |
| qemu | qemu | >= 0 < 1:2.11+dfsg-1ubuntu7.37 | 1:2.11+dfsg-1ubuntu7.37 |
| qemu | qemu | >= 0 < 1:4.2-3ubuntu6.17 | 1:4.2-3ubuntu6.17 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_for_ibm_z_systems | — | — |
| redhat | enterprise_linux_for_power_little_endian | — | — |
| redhat | openstack_platform | — | — |
| redhat | openstack_platform | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
osv6.5MEDIUM