| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | = 1.0= 1.0.1= 1.1= 1.4.1= 1.4.2= 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.6.0= 1.6.1= 1.6.2= 1.7.1= 2.0.0= 2.0.2= 2.1.0= 2.1.1= 2.1.2= 2.1.3 |
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free