CVE-2020-25625 Information

Description

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Reference

http://www.openwall.com/lists/oss-security/2020/09/17/1 https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html https://security.netapp.com/advisory/ntap-20201009-0005/

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction Required

HIGH

Scope

NONE

Confidentiality Impact

CHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

5.3