Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 15, 2017 |
| Debian | — | Upgrade qemu | Feb 19, 2019 | Mar 15, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Mar 15, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2017 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-chardev-spiceUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-langUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-ipxeUpgrade qemu-audio-ossUpgrade qemu-s390Upgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade xen-toolsUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemuUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-vgabiosUpgrade qemu-armUpgrade qemu-ui-cursesUpgrade kvmUpgrade xen-develUpgrade xenUpgrade qemu-toolsUpgrade xen-doc-html | Feb 28, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-arm | Apr 21, 2017 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub