Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 10, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 19, 2016 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-microvmUpgrade qemu-langUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-baumUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-openglUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-s390 | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-kvm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub