Security Advisory
CVE-2014-5263
6.8
Vulnerability Description
vmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATE_END_OF_LIST macro, which allows attackers to cause a denial of service (out-of-bounds access, infinite loop, and memory corruption) and possibly gain privileges via unspecified vectors.
Published Date
August 26, 2014
Official Source
NIST NVD Advisory