Security Advisory

CVE-2019-12068

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-24 19:59:44

Last updated 2024-08-04 23:10:30

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.

← Browse all CVEs View on cve.org ↗