Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-block-glusterUpgrade qemu-kvm-coreUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-block-rbd | May 15, 2019 | May 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 12, 2017 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-skibootUpgrade xen-libs-32bitUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade qemu-seabiosUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemuUpgrade xen-toolsUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade xen-kmp-paeUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-audio-ossUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-ppcUpgrade xen-develUpgrade qemu-hw-usb-redirectUpgrade xenUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-kvmUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade xen-doc-htmlUpgrade kvmUpgrade xen-tools-domuUpgrade qemu-vgabiosUpgrade qemu-audio-pa | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-arm | Sep 13, 2017 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub