Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 10, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade xen-kmp-defaultUpgrade qemu-guest-agentUpgrade xen-tools-domUUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-s390Upgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemuUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-ui-cursesUpgrade xen-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade xen-develUpgrade qemu-ksm | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-s390x | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub