Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 19, 2019 | May 23, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | May 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | May 23, 2017 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-system-x86 | May 15, 2019 | Apr 28, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2017 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-x86Upgrade xen-tools-xendomains-wait-diskUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade xenUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade qemu-hw-display-qxlUpgrade qemu-seabiosUpgrade qemu-sgabiosUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-paeUpgrade xen-develUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade xen-doc-pdfUpgrade xen-toolsUpgrade qemu-block-curlUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade kvmUpgrade qemu-langUpgrade qemu-s390Upgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-ipxe | Jun 30, 2017 | May 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-x86 | May 17, 2017 | May 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub