Skip to main content

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2021-20257

Medium
6.5/10

Summary

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU before 6.0.0-rc0. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

  • LOW
  • LOCAL
  • NONE
  • CHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-835 - Loop with Unreachable Exit Condition

Loops with multiple exits and flags detract from the quality of an application. They tend to make control structures difficult to understand, and introduce the risk of non-termination and other structural problems. The vulnerability “loop with unreachable exit condition” enables attackers to exploit this flaw, leading to denial of service.

References

Advisory Timeline

  • Published