QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 29, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Dec 29, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 29, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 29, 2016 |
| Suse | — | Upgrade qemu-audio-spiceUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemuUpgrade qemu-audio-ossUpgrade xen-tools-domuUpgrade xen-libs-32bitUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-htmlUpgrade qemu-x86Upgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-ppcUpgrade qemu-s390xUpgrade xenUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade xen-toolsUpgrade xen-kmp-pae | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-arm | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub