CVE-2020-14394 : An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

Published 2022-08-17 21:15:08

Updated 2023-03-15 00:15:10

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Threat overview for CVE-2020-14394

Top countries where our scanners detected CVE-2020-14394

Top open port discovered on systems with this issue 53

IPs affected by CVE-2020-14394 680,429

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2020-14394!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2020-14394

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 18 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-14394

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
3.2	LOW	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L	1.5	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2020-14394

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Assigned by:

nvd@nist.gov (Primary)
secalert@redhat.com (Secondary)

References for CVE-2020-14394

Products affected by CVE-2020-14394