Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2016 |
| Suse | — | Upgrade qemu-microvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-baumUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade qemu-toolsUpgrade xen-develUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade qemu-kvmUpgrade qemuUpgrade qemu-langUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade qemu-ipxeUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade xen-libs-32bitUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade kvmUpgrade xenUpgrade qemu-audio-alsaUpgrade xen-libsUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade xen-doc-htmlUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-defaultUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-seabios | Jan 14, 2017 | Dec 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-sparc | Apr 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub