QEMU ehci_process_itd Function Denial of Service Vulnerability (CVE-2015-8558)

QEMU ehci_process_itd Function Denial of Service Vulnerability (CVE-2015-8558)
QEMU ehci_process_itd Function Denial of Service Vulnerability (CVE-2015-8558)

Release date:
Updated on:

Affected Systems:

QEMU

Description:

Bugtraq id: 80694
CVE (CAN) ID: CVE-2015-8558

QEMU is an open source simulator software.

QEMU has security vulnerability in hw/usb/hcd-ehci.c/ehci_process_itd function. The OS administrator of the local client can use the iTD list to cause DOS.

<* Source: Qinghao Tang
*>

Suggestion:

Vendor patch:

QEMU
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://bugzilla.redhat.com/show_bug.cgi? Id = 1277983
Http://git.qemu.org /? P = qemu. git; a = commit; h = 156a2e4dbffa85997636a7a39ef12da6f1b40254

Use KVM + Qemu to build a virtual machine in Ubuntu

Linux getting started Tutorial: QEMU for Virtual Machine experience

Ubuntu 12.04 cannot find the Qemu command

Install QEMU + efi bios on Arch Linux

QEMU translation framework and debugging tools

QEMU code analysis: BIOS loading process

QEMU details: click here
QEMU: click here

This article permanently updates the link address: