Lucene search
Veracode Vulnerability DatabaseVERACODE:29749HistoryMar 17, 2021 - 11:46 p.m.
Denial Of Service (DoS)
2021-03-1723:46:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
33
denial of service
vulnerability
nic emulator
process_tx_desc
transmit descriptors
invalid values
EPSS
0
Percentile
14.2%
qemu is vulnerable to denial of service. An infinite loop in the e1000 NIC emulator occurs while processing transmit (tx) descriptors in process_tx_desc when various descriptor fields are initialized with invalid values.
References
bugzilla.redhat.com/show_bug.cgi?id=1930087
github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8
lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html
security-tracker.debian.org/tracker/CVE-2021-20257
security.netapp.com/advisory/ntap-20220425-0003/
www.openwall.com/lists/oss-security/2021/02/25/2
Related
attackerkb
attackerkb
CVE-2021-20257
2020-12-17 00:00:00
nessus
nessus
Amazon Linux 2 : qemu (ALAS-2023-2060)
2023-06-05 00:00:00
SUSE SLES11 Security Update : xen (SUSE-SU-2021:14702-1)
2021-06-10 00:00:00
Oracle Linux 7 : qemu (ELSA-2021-9335)
2021-06-28 00:00:00
amazon
amazon
Low: qemu
2023-05-25 17:41:00
cbl_mariner
cbl_mariner
CVE-2021-20257 affecting package qemu for versions less than 6.2.0-2
2022-06-03 17:54:21
CVE-2021-20257 affecting package qemu-kvm 4.2.0-38
2022-05-26 19:04:44
redhatcve
redhatcve
CVE-2021-20257
2021-02-22 08:16:14
prion
prion
Denial of service
2022-03-16 15:15:00
alpinelinux
alpinelinux
CVE-2021-20257
2022-03-16 15:15:09
osv
osv
CVE-2021-20257
2022-03-16 15:15:09
Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
cvelist
cvelist
CVE-2021-20257
2022-03-16 14:12:26
cve
cve
CVE-2021-20257
2022-03-16 15:15:09
ubuntucve
ubuntucve
CVE-2021-20257
2021-02-23 00:00:00
debiancve
debiancve
CVE-2021-20257
2022-03-16 15:15:09
nvd
nvd
CVE-2021-20257
2022-03-16 15:15:09
redhat
redhat
(RHSA-2022:0081) Low: virt:av and virt-devel:av security and bug fix update
2022-01-11 09:12:04
(RHSA-2021:5238) Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
oraclelinux
oraclelinux
virt:ol and virt-devel:rhel security update
2021-12-22 00:00:00
qemu security update
2021-06-28 00:00:00
qemu security update
2022-01-04 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:14702-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1251-1)
2021-04-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1252-1)
2021-04-26 00:00:00
almalinux
almalinux
Low: virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
citrix
citrix
Citrix Hypervisor Security Update
2021-06-23 11:06:42
rocky
rocky
virt:rhel and virt-devel:rhel security update
2021-12-21 09:11:21
debian
debian
[SECURITY] [DLA 2623-1] qemu security update
2021-04-10 21:21:02
[SECURITY] [DLA 3099-1] qemu security update
2022-09-05 03:28:05
suse
suse
Security update for qemu (moderate)
2021-07-14 00:00:00
Security update for qemu (important)
2021-04-23 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2021-07-15 00:00:00
gentoo
gentoo
QEMU: Multiple Vulnerabilities
2022-08-14 00:00:00