CVE-2014-5263

vmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATE_END_OF_LIST macro, which allows attackers to cause a denial of service (out-of-bounds access, infinite loop, and memory corruption) and possibly gain privileges via unspecified vectors.

Not vulnerable.

This issue does not affect the versions of kvm package as shipped with Red Hat Enterprise Linux 5 and versions of qemu-kvm package as shipped with Red Hat Enterprise Linux 6 because they did not backport the commit that introduced this issue.

This issue does not affect the versions of qemu-kvm package as shipped with Red Hat Enterprise Linux 7 because the layout of qemu-kvm binary does not allow successful exploitation of this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.