Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 8, 2016 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade xen-libs-32bitUpgrade qemu-kvmUpgrade kvmUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-ppcUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade xen-doc-htmlUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-langUpgrade xen-kmp-paeUpgrade xen-libsUpgrade qemuUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade xen-develUpgrade qemu-armUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade xen-toolsUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-doc-pdfUpgrade qemu-skiboot | Jan 14, 2017 | Dec 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-ppc | Apr 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub