QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2017 | Jun 8, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 8, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Jun 17, 2020 | Jun 8, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2017 |
| Suse | — | Upgrade qemuUpgrade kvmUpgrade xen-libsUpgrade qemu-x86Upgrade qemu-kvmUpgrade xen-libs-32bitUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade xenUpgrade xen-doc-htmlUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade xen-tools-domuUpgrade qemu-sgabiosUpgrade qemu-seabiosUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-armUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade xen-kmp-paeUpgrade qemu-langUpgrade qemu-s390Upgrade xen-tools-xendomains-wait-disk | Jun 30, 2017 | Jun 8, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-arm | Sep 13, 2017 | Jun 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub