MEDIUM 5.5 Microsoft

CVE-2021-20255

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Microsoft Security Update 2021-Mar: A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Affected Products

References

Published: 2021-03-09 · Source: Microsoft · Feed updated: 2026-08-20
This medium severity vulnerability with a CVSS score of 5.5 was published on 2021-03-09 via Microsoft. Affected: azl3 qemu 6.2.0-18 on Azure Linux 3.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0.
vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.