Hide Forgot
Quick Emulator(Qemu) built with the VMWARE PVSCSI paravirtual SCSI bus emulation support is vulnerable to an infinite loop issue. It could occur while initialising SCSI message ring buffer in pvscsi_log2(). A privileged user inside guest could use this flaw to consume host cpu cycles or crash the Qemu process resulting in DoS. Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/04/26/5
Acknowledgments: Name: Li Qiang (Qihoo 360 Gear Team) YY Z(Researcher)
Created qemu tracking bugs for this issue: Affects: fedora-all [bug 1445622]
qemu-2.7.1-7.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.