Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 19, 2019 | May 23, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | May 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | May 23, 2017 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-system-x86Upgrade qemu-system-aarch64 | May 15, 2019 | Apr 28, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2017 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade qemu-audio-spiceUpgrade xen-libs-32bitUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-block-rbdUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-ipxeUpgrade kvmUpgrade qemu-chardev-baumUpgrade qemu-ui-openglUpgrade xen-libsUpgrade xen-doc-pdfUpgrade qemu-vgabiosUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade xen-toolsUpgrade qemu-block-curlUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade xen-develUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabiosUpgrade xen-doc-htmlUpgrade qemu-skibootUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-paeUpgrade xenUpgrade xen-tools-domU | Jun 30, 2017 | May 16, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-misc | May 17, 2017 | May 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub