Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2016 |
| Suse | — | Upgrade xen-develUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-sgabiosUpgrade xen-toolsUpgrade xen-tools-domuUpgrade xen-libs-32bitUpgrade qemu-ui-spice-coreUpgrade kvmUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-hw-usb-redirectUpgrade xenUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade xen-libsUpgrade qemu-audio-alsaUpgrade xen-doc-htmlUpgrade qemu-armUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade xen-kmp-paeUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemu-block-curl | Jan 14, 2017 | Dec 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86 | Apr 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub