Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 10, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 19, 2016 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-s390x | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub