CVE-2018-20216

Name of the Vulnerable Software and Affected Versions: QEMU (affected versions not specified)

Description: The issue is related to the pvrdma idx ring has function in the PVRDMA emulator of QEMU, which can lead to an infinite loop due to an unreachable exit condition. This can be exploited by a remote attacker to cause a denial of service. The problem arises from un-checked return values in hw/rdma/vmw/pvrdma dev ring.c, specifically the mishandling of -1 return values.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.