Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 19, 2019 | May 23, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 23, 2017 |
| Oracle_linux | — | Upgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-system-x86 | May 15, 2019 | Apr 28, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2017 |
| Suse | — | Upgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-kvmUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-iscsi | Jul 4, 2017 | May 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86 | May 17, 2017 | May 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub