Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 15, 2017 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 15, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 15, 2017 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390Upgrade qemu-s390xUpgrade qemu-block-curlUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-ksmUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-skibootUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-armUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpu-pci | Mar 8, 2017 | Mar 7, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-s390x | Apr 21, 2017 | Mar 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub