Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-25599 State: PUBLISHED Published: 2020-09-23T21:10:01 Last Updated: 2024-08-04T15:33:05.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot
t of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-343.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-secur
3Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/ - https://security.gentoo.org/glsa/202011-06 - http://www.openwall.com/lists/oss-security/2020/12/16/5
CVE ID: CVE-2020-25600 State: PUBLISHED Published: 2020-09-23T21:12:24 Last Updated: 2024-08-04T15:33:05.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initia
, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another doma
en possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-342.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/ - https://security.gentoo.org/glsa/202011-06
CVE ID: CVE-2020-25601 State: PUBLISHED Published: 2020-09-23T21:14:03 Last Updated: 2024-08-04T15:33:05.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Ma
suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-344.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
MQRQYWYEPHVBIWUEAVQ3LU4FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/ - https://security.gentoo.org/glsa/202011-06
CVE ID: CVE-2020-25602 State: PUBLISHED Published: 2020-09-23T21:16:07 Last Updated: 2024-08-04T15:33:05.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can
ich is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability. Additional Analyst
ly x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-333.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
/2020-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/ - https://security.gentoo.org/glsa/202011-06
CVE ID: CVE-2020-25603 State: PUBLISHED Published: 2020-09-23T21:34:56 Last Updated: 2024-08-04T15:33:05.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Sys
pervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access.
uggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-340.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-security-announce/
PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/ - https://security.gentoo.org/glsa/202011-06
CVE ID: CVE-2020-25604 State: PUBLISHED Published: 2020-09-23T21:18:02 Last Updated: 2024-08-04T15:33:05.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86
vice (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-336.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-
announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/ - https://www.debian.org/security/2020/dsa-4769 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/ - https://security.gentoo.org/glsa/202011-06
CVE ID: CVE-2020-25605 State: PUBLISHED Published: 2021-02-17T20:40:41 Last Updated: 2024-08-04T15:33:05.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://docs.agora.io/en/Agora%20Platform/downloads - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/dont-call-us-well-call-you-mcafee-atr-finds-vulnerability-in-agora-video-sdk/
CVE ID: CVE-2020-25606 State: PUBLISHED Published: 2020-12-18T07:12:43 Last Updated: 2024-08-04T15:33:05.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories
CVE ID: CVE-2020-25608 State: PUBLISHED Published: 2020-12-18T07:15:34 Last Updated: 2024-08-04T15:33:05.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories
CVE ID: CVE-2020-25609 State: PUBLISHED Published: 2020-12-18T07:14:49 Last Updated: 2024-08-04T15:33:05.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to view and modify user data. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories
CVE ID: CVE-2020-25610 State: PUBLISHED Published: 2020-12-18T07:11:07 Last Updated: 2024-08-04T15:33:05.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insufficient access control for conference codes. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories
CVE ID: CVE-2020-25611 State: PUBLISHED Published: 2020-12-18T07:11:58 Last Updated: 2024-08-04T15:33:05.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending arbitrary code due to improper input validation, aka XSS. Successful exploitation could allow an attacker to view user conference information. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories
CVE ID: CVE-2020-25612 State: PUBLISHED Published: 2020-12-18T07:10:26 Last Updated: 2024-08-04T15:33:05.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NuPoint Messenger of Mitel MiCollab before 9.2 could allow an attacker with escalated privilege to access user files due to insufficient access control. Successful exploit could potentially allow an attacker to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories
CVE ID: CVE-2020-25613 State: PUBLISHED Published: 2020-10-06T00:00:00 Last Updated: 2024-08-04T15:33:05.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check), which may lead to an HTTP Request Smuggling attack. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/965267 - https://www.ruby-lang.org/en/news/2020/09/29/http-request-s
tainer: References: - https://hackerone.com/reports/965267 - https://www.ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-25613/ - https://github.com/ruby/webrick/commit/8946bb38b4d87549f0d99ed73c62c41933f97cc7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFP3E7KXXT3H3KA6CBZPUOGA5VPFARRJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTZURYROG3FFED3TYCQOBV66BS4K6WOV/ - https://security.netapp.com/advisory/ntap-20210115-0008/ - https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html - https://security.gentoo.org/glsa/202401-27
CVE ID: CVE-2020-25614 State: PUBLISHED Published: 2020-09-16T14:41:08 Last Updated: 2024-08-04T15:33:05.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/antchfx/xmlquery/issues/39 - https://github.com/antchfx/xmlquery/compare/v1.3.0...v1.3.1
CVE ID: CVE-2020-25617 State: PUBLISHED Published: 2020-12-16T13:52:03 Last Updated: 2024-08-04T15:33:05.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://ernw.de/en/publications.html - https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
CVE ID: CVE-2020-25618 State: PUBLISHED Published: 2020-12-16T13:56:58 Last Updated: 2024-08-04T15:33:05.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root (i.e., the use of root privileges is not limited to specific programs listed in the sudoers file). Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://ernw.de/en/publications.html - https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-centra
r/s/ - https://ernw.de/en/publications.html - https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
CVE ID: CVE-2020-25619 State: PUBLISHED Published: 2020-12-16T14:01:36 Last Updated: 2024-08-04T15:33:05.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwarding with a temporary key pair) to access network services on the 127.0.0.1 interface, even though this feature was only intended for user-to-agent communication. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://ernw.de/en/publications.html - https://insinuato
References: - https://support.solarwinds.com/SuccessCenter/s/ - https://ernw.de/en/publications.html - https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
CVE ID: CVE-2020-25620 State: PUBLISHED Published: 2020-12-16T14:04:59 Last Updated: 2024-08-04T15:40:35.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to the N-Central Administrative Console (NAC) and/or the regular web interface. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://ernw.de/en/publications.html - https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
CVE ID: CVE-2020-25621 State: PUBLISHED Published: 2020-12-16T14:07:07 Last Updated: 2024-08-04T15:40:35.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://ernw.de/en/publications.html - https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
CVE ID: CVE-2020-25622 State: PUBLISHED Published: 2020-12-16T14:07:32 Last Updated: 2024-08-04T15:40:35.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://ernw.de/en/publications.html - https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
CVE ID: CVE-2020-25623 State: PUBLISHED Published: 2020-10-02T12:00:12 Last Updated: 2024-08-04T15:40:35.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if httpd in the inets application is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.erlang.org/news - https://www.erlang.org/downloads - https://github.com/erlang/otp/releases/tag/OTP-23.1
CVE ID: CVE-2020-25624 State: PUBLISHED Published: 2020-11-30T06:28:17 Last Updated: 2024-08-04T15:40:35.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html - https://security.netapp.com/advisory/ntap-20201210-0005/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2020-25625 State: PUBLISHED Published: 2020-09-25T04:12:07 Last Updated: 2024-08-04T15:40:35.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html - http://www.openwall.com/lists/oss-security/2020/09/17/1 - https://security.netapp.com/advisory/ntap-20201009-0005/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html