Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 19, 2019 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Jun 17, 2020 | Mar 15, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2017 |
| Suse | — | Upgrade xen-tools-domUUpgrade qemu-ksmUpgrade xen-doc-htmlUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-paUpgrade xen-develUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-alsaUpgrade xenUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade xen-kmp-paeUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade xen-doc-pdfUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-vgabiosUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-ui-spice-coreUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade xen-toolsUpgrade qemu-langUpgrade qemu-block-curlUpgrade xen-libs-32bit | Mar 8, 2017 | Mar 7, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-ppc | Apr 21, 2017 | Mar 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub