Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-img | Apr 27, 2020 | Oct 12, 2017 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Oct 12, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Aug 28, 2019 | Oct 12, 2017 |
| Debian | — | Upgrade qemu | May 31, 2018 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | May 3, 2018 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Jul 3, 2018 | Oct 12, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade ivshmem-toolsUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemu-system-aarch64 | Apr 19, 2018 | Sep 22, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-commonNo solution existsUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-img | Apr 11, 2018 | Oct 12, 2017 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-ui-cursesUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsi | Nov 2, 2017 | Oct 12, 2017 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-ppc | Feb 21, 2018 | Oct 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub