Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 8, 2016 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade xen-kmp-defaultUpgrade qemu-hw-usb-redirectUpgrade xen-libs-32bitUpgrade qemu-ui-gtkUpgrade qemu-audio-spiceUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade xen-tools-domUUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade qemu-block-curlUpgrade xenUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-kvmUpgrade kvmUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade xen-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade xen-doc-pdfUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemuUpgrade xen-kmp-paeUpgrade xen-libsUpgrade qemu-armUpgrade qemu-audio-paUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpu-pci | Jan 14, 2017 | Dec 23, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-x86 | Apr 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub