CVE-2017-8112

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-81148.8Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.CVE-2017-81155.3Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remCVE-2017-81169.8The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute CVE-2017-81179.8The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proceCVE-2017-81182.3The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some senCVE-2017-81199.8The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proceCVE-2017-81209.8The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proceCVE-2017-81215.3The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some senCVE-2017-81229.8The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of paraCVE-2017-81239.8The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of paraCVE-2017-81249.8The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of paraCVE-2017-81256.1The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An
CVE-2017-8112: Medium severity, CVSS 6.5 | Vulnix