ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-20257

—
CVSS 3.1
6.5 medium
EPSS
<1%p30
Published
()
Modified
Description

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Vendors
qemufedoraprojectredhatdebian
Products
qemu, fedora, openstack platform, enterprise linux, enterprise linux for ibm z systems, enterprise linux for power little endian, codeready linux builder, debian linux
Weakness
CWE-835
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.