Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 8, 2016 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-s390Upgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade xenUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade xen-kmp-defaultUpgrade qemu-chardev-baumUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade xen-doc-htmlUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-ui-openglUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade qemu-ui-spice-coreUpgrade xen-libsUpgrade qemuUpgrade qemu-ksmUpgrade xen-doc-pdfUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade xen-develUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-app | Jan 14, 2017 | Dec 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppc | Apr 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub