CVE-2021-20255 — MEDIUM (5.5)

Vulnerability Description

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qemu	Qemu	All versions
Debian	Debian Linux	9.0

Related Weaknesses (CWE)

CWE-835 CWE-674

References

https://bugzilla.redhat.com/show_bug.cgi?id=1930646Issue TrackingPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlMailing ListThird Party Advisory
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflThird Party Advisory
https://security.netapp.com/advisory/ntap-20210507-0003/Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/02/25/1Mailing ListPatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1930646Issue TrackingPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlMailing ListThird Party Advisory
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflThird Party Advisory
https://security.netapp.com/advisory/ntap-20210507-0003/Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/02/25/1Mailing ListPatchThird Party Advisory

FAQ

What is CVE-2021-20255?

CVE-2021-20255 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. Th...

How severe is CVE-2021-20255?

CVE-2021-20255 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-20255?

Check the references section above for vendor advisories and patch information. Affected products include: Qemu Qemu, Debian Debian Linux.