Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2016 |
| Suse | — | Upgrade qemu-toolsUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-paUpgrade xenUpgrade xen-tools-domuUpgrade qemu-microvmUpgrade kvmUpgrade xen-toolsUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-redirectUpgrade qemu-ipxeUpgrade xen-develUpgrade qemu-s390xUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade xen-doc-htmlUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-ui-openglUpgrade qemu-ui-cursesUpgrade xen-kmp-paeUpgrade qemu-ksmUpgrade qemu-x86Upgrade xen-libsUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-vga | Jan 14, 2017 | Dec 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-arm | Apr 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub