CVE-2020-25625

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2020/09/17/1Mailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/11/msg00047.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.htmlMailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20201009-0005/Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/09/17/1Mailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/11/msg00047.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.htmlMailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20201009-0005/Third Party Advisory

Timeline

Published: Sep 25, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-256266.1A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framew CVE-2020-256276.1The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in CVE-2020-256286.1The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7 CVE-2020-256298.8A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access CVE-2020-25634.2Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). The supported version that i CVE-2020-256307.5A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping t CVE-2020-256316.1A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chap CVE-2020-256328.2A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without CVE-2020-256335.3A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentia CVE-2020-256345.4A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitiv CVE-2020-256355.5A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is comple CVE-2020-256367.1A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are