Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-kvm-core | May 15, 2019 | May 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 12, 2017 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade kvmUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xenUpgrade xen-develUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade xen-tools-domuUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-chardev-baumUpgrade qemu-langUpgrade xen-kmp-defaultUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-armUpgrade xen-libs-32bitUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-ui-spice-appUpgrade xen-libsUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade xen-toolsUpgrade qemu-chardev-spiceUpgrade qemu-block-rbd | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppc | Sep 13, 2017 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub