Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemu-block-iscsiUpgrade qemu-system-x86 | May 15, 2019 | May 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 12, 2017 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade qemu-audio-spiceUpgrade xen-libs-32bitUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-seabiosUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade xen-develUpgrade xenUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-ksmUpgrade qemu-microvmUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade kvmUpgrade qemu-toolsUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade xen-doc-html | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppc | Sep 13, 2017 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub