CVE-2015-8558

The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.

• CWE-835

• http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254
• http://www.debian.org/security/2016/dsa-3469Third Party Advisory
• http://www.debian.org/security/2016/dsa-3470Third Party Advisory
• http://www.debian.org/security/2016/dsa-3471Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/14/16Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/14/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/80694Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1277983Issue Tracking, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.htmlMailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201602-01Third Party Advisory
• http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254
• http://www.debian.org/security/2016/dsa-3469Third Party Advisory
• http://www.debian.org/security/2016/dsa-3470Third Party Advisory
• http://www.debian.org/security/2016/dsa-3471Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/14/16Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/14/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/80694Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1277983Issue Tracking, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.htmlMailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201602-01Third Party Advisory

Published

May 23, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8552The PCI backend driver in Xen, when running on an x86 system…
• CVE-2015-8553Xen allows guest OS users to obtain sensitive information fr…6.5
• CVE-2015-8554Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, whe…
• CVE-2015-8555Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initializ…
• CVE-2015-8556Local privilege escalation vulnerability in the Gentoo QEMU …
• CVE-2015-8557The FontManager._get_nix_font_path function in formatters/im…
• CVE-2015-8559The knife bootstrap command in chef Infra client before vers…7.5
• CVE-2015-8560Incomplete blacklist vulnerability in util.c in foomatic-rip…
• CVE-2015-8561The F1BookView ActiveX control in F1 Bookview in Schneider E…
• CVE-2015-8562Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attack…
• CVE-2015-8563Cross-site request forgery (CSRF) vulnerability in the com_t…
• CVE-2015-8564Directory traversal vulnerability in Joomla! 3.4.x before 3.…