VDB

DEBIAN-CVE-2020-14394

DEBIAN-CVE-2020-14394 PUBLISHED CVSS 3.200000047683716 LOW

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

Risk Scores

CVSS v3.1
3.200000047683716
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected Products

VendorProductVersions
Debian:12qemu0, 0, 0
Debian:14qemu0, 0, 0
Debian:13qemu0, 0, 0
Debian:11qemu5.2+dfsg, 0, 1:5.2+dfsg-11

Timeline

  • Aug 17, 2022 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›