Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade qemuUpgrade qemu-system-x86-coreUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-common | May 15, 2019 | May 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 12, 2017 |
| Suse | — | Upgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-audio-paUpgrade qemu-block-curlUpgrade xen-tools-domUUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-toolsUpgrade qemu-ppcUpgrade xen-develUpgrade qemu-vgabiosUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemuUpgrade qemu-audio-spiceUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-langUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade xen-toolsUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-skibootUpgrade qemu-guest-agentUpgrade xen-libs | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64 | Sep 13, 2017 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub