Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 19, 2019 | May 23, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 23, 2017 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemuUpgrade qemu-block-iscsiUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-kvm-core | May 15, 2019 | Apr 28, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2017 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-kvmUpgrade qemu-ui-openglUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-block-iscsiUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-audio-oss | Jul 4, 2017 | May 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-aarch64 | May 17, 2017 | May 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub