Description
hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.
References (4)
Core 4
Core References
Exploit, Mailing List, Third Party Advisory x_refsource_misc
https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg03185.html
Mailing List, Patch, Third Party Advisory x_refsource_confirm
http://www.openwall.com/lists/oss-security/2020/12/01/2
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
Scores
CVSS v3
5.5
EPSS
0.0005
EPSS Percentile
14.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-835
Status
published
Products (3)
debian/debian_linux
9.0
debian/debian_linux
10.0
qemu/qemu
5.0.0
Published
Dec 04, 2020
Tracked Since
Feb 18, 2026