CVE-2021-20255

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835 CWE-674

Affected software

Vendor	Product	Versions
n/a	QEMU	all versions

References

https://bugzilla.redhat.com/show_bug.cgi?id=1930646Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlMailing List, Third Party Advisory
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflow1Third Party Advisory
https://security.netapp.com/advisory/ntap-20210507-0003/Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/02/25/1Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1930646Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlMailing List, Third Party Advisory
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflow1Third Party Advisory
https://security.netapp.com/advisory/ntap-20210507-0003/Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/02/25/1Mailing List, Patch, Third Party Advisory

Timeline

Published: Mar 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-202565.3A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_h CVE-2021-202576.5An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in proc CVE-2021-202597.8A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacke CVE-2021-20268.2Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are CVE-2021-202607.8A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with CVE-2021-202616.4A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue CVE-2021-202626.8A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take CVE-2021-202633.3A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the 'security.capabilit CVE-2021-202647.8An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker w CVE-2021-202655.5A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. T CVE-2021-202664.9A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds rea CVE-2021-202677.1A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a se