QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2017 | Jun 8, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 8, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jun 17, 2020 | Jun 8, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2017 |
| Suse | — | Upgrade qemu-block-sshUpgrade xen-toolsUpgrade qemu-ipxeUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-s390Upgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade xen-doc-pdfUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-armUpgrade qemu-kvmUpgrade xen-libs-32bitUpgrade xenUpgrade kvmUpgrade xen-tools-domUUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-ppcUpgrade xen-libsUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade xen-develUpgrade xen-doc-html | Jun 30, 2017 | Jun 8, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-s390x | Sep 13, 2017 | Jun 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub