A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.
CVSS 2: LOW – 2.1 (Version: 2.0)
CVSS 3: MEDIUM – 6 (Version: 3.1)
Quelle: NVD – CVE-2021-3416
Datum Veröffentlichung: 2021-03-18T20:15Z, Datum letzte Änderung: 2021-05-07T05:15Z