Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 24, 2016 |
| Suse | — | Upgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemuUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-ppc | Jul 21, 2017 | Dec 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub