CVE-2021-3416CWE-835

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0

published March 18, 2021

CVSS
—
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2021-03-18T19:53Z
EPSS history
Timeline
  • 18 MAR 19:53Z
    A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0
    cvelistv5