QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2017 | Jun 8, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 8, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jun 17, 2020 | Jun 8, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2017 |
| Suse | — | Upgrade xen-tools-domUUpgrade kvmUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade xen-develUpgrade qemu-kvmUpgrade xen-doc-htmlUpgrade qemu-block-rbdUpgrade xen-libs-32bitUpgrade qemu-x86Upgrade qemuUpgrade qemu-vgabiosUpgrade qemu-guest-agentUpgrade xen-libsUpgrade xenUpgrade qemu-ppcUpgrade xen-kmp-defaultUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade xen-toolsUpgrade qemu-s390Upgrade xen-doc-pdfUpgrade qemu-block-curlUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-langUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-pae | Jun 30, 2017 | Jun 8, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-ppc | Sep 13, 2017 | Jun 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub