Denial of Service Vulnerability in QEMU Package - CVE-2017-6505
Summary
ALPINE-CVE-2017-6505: The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint... Affects qemu versions < 2.8.1.1-r0. Fixed in 2.8.1.1-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
QEMU, also known as Quick Emulator, is an open-source machine emulator and virtualizer that enables users to run multiple operating systems on a single host. It is widely used for virtualization and emulation purposes, providing a versatile platform for developers and system administrators. The vulnerability in question affects the ohci_service_ed_list function within the USB host controller driver, which can lead to a denial of service condition.
Vulnerability Detail
The vulnerability identified as CVE-2017-6505 allows local guest OS users to trigger an infinite loop in the ohci_service_ed_list function of QEMU prior to version 2.9.0. This can result in a denial of service, as the affected system may become unresponsive due to the continuous loop. The issue arises from improper handling of the number of link endpoint list descriptors, which can be exploited by malicious users within the guest operating system.
How To Fix
Minimum fixed version
2.8.1.1-r0
This is the first release that contains the fix.
sudo apk add --upgrade qemuTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the QEMU environment for untrusted guest OS users to mitigate the risk of exploitation until the package can be updated.
Conclusion
In summary, CVE-2017-6505 is a denial of service vulnerability in the QEMU package that can be exploited by local guest OS users. It is crucial to update to the patched version to mitigate the risk of exploitation. Users are encouraged to monitor their systems and utilize tools like Vulert for real-time vulnerability alerts.
See every vulnerability recorded for qemu →
FAQ
CVE-2017-6505 is a vulnerability in the QEMU package that allows local guest OS users to cause a denial of service through an infinite loop in the ohci_service_ed_list function.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The primary consequence of this vulnerability is a denial of service, where the affected system may become unresponsive due to an infinite loop triggered by malicious users.
You can update the QEMU package in Alpine Linux using the command: 'apk add qemu=2.8.1.1-r0'. This will install the patched version that resolves the vulnerability.
The CVSS score for CVE-2017-6505 is 6.5, indicating a moderate severity level for this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for qemu.
