Name: CVE-2017-5525: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2017-03-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-5525, CWE-401, CVSS 6.5, EPSS 0.00143

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade qemu	Aug 22, 2024	Mar 15, 2017
Debian	—	Upgrade qemu	Feb 19, 2019	Mar 15, 2017
Gentoo Linux	—	Upgrade app-emulation/qemu.	Oct 30, 2017	Mar 15, 2017
Huawei Euleros 2_0_sp2	—	Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common	Jun 17, 2020	Mar 15, 2017
Redhat_linux	—	No solution exists	Jul 9, 2025	Jan 11, 2017
Suse	—	Upgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ksmUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-armUpgrade qemu-ui-spice-app	Mar 8, 2017	Mar 7, 2017
Ubuntu	—	Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system	Apr 21, 2017	Mar 8, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence