hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacard-develUpgrade libcacardUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade libcacard-tools | Dec 1, 2016 | Nov 4, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2014 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacard-develUpgrade libcacardUpgrade libcacard-toolsUpgrade qemu-kvm | Oct 16, 2024 | Nov 4, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 12, 2014 |
| Suse | — | Upgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade kvmUpgrade qemu-block-rbdUpgrade qemu-chardev-baumUpgrade qemuUpgrade qemu-s390xUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-armUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-ui-curses | Dec 18, 2015 | Oct 8, 2014 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-kvm | Nov 8, 2024 | Nov 4, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub