QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2017 | Jun 8, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 8, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jun 17, 2020 | Jun 8, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2017 |
| Suse | — | Upgrade xen-kmp-paeUpgrade qemu-ipxeUpgrade xen-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-armUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-block-curlUpgrade xen-kmp-defaultUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade xen-doc-pdfUpgrade xen-libsUpgrade xenUpgrade qemu-ppcUpgrade qemu-x86Upgrade xen-develUpgrade xen-tools-domuUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemuUpgrade xen-libs-32bitUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade kvmUpgrade qemu-tools | Jun 30, 2017 | Jun 8, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-s390x | Sep 13, 2017 | Jun 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub