Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2016 |
| Suse | — | Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade xen-libsUpgrade xen-kmp-paeUpgrade qemu-x86Upgrade qemu-block-iscsiUpgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade xen-tools-domUUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-microvmUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade kvmUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-rbdUpgrade xen-develUpgrade xen-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade xenUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-audio-paUpgrade qemu-ppc | Jan 14, 2017 | Dec 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-ppc | Apr 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub