Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 10, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemuUpgrade xen-toolsUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade qemu-block-sshUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade xenUpgrade qemu-s390xUpgrade xen-kmp-defaultUpgrade qemu-audio-spiceUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-guest-agentUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade xen-tools-domUUpgrade qemu-kvmUpgrade qemu-x86Upgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade xen-doc-htmlUpgrade qemu-hw-usb-redirectUpgrade qemu-s390Upgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccw | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system | Nov 9, 2016 | Nov 9, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub