A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-user-binfmtUpgrade qemu-audio-sdlUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-commonUpgrade qemu-debuginfoUpgrade qemu-block-dmgUpgrade qemu-user-staticUpgrade qemuUpgrade qemu-ui-sdlUpgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-guest-agentUpgrade qemu-userUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-audio-oss | Jun 6, 2023 | May 26, 2021 |
| Debian | — | Upgrade qemu | Sep 7, 2021 | May 26, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | May 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | May 26, 2021 |
| Oracle_linux | — | Upgrade libvirt-libsUpgrade superminUpgrade virt-dibUpgrade nbdkitUpgrade python3-libvirtUpgrade qemu-block-rbdUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-curlUpgrade python3-libguestfsUpgrade seabiosUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-xz-filterUpgrade libvirt-daemonUpgrade sgabiosUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade hivex-develUpgrade supermin-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libnbdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade libiscsi-utilsUpgrade libvirt-adminUpgrade netcfUpgrade virt-v2vUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-bash-completionUpgrade nbdkit-example-pluginsUpgrade netcf-libsUpgrade libguestfs-tools-cUpgrade libguestfs-xfsUpgrade libvirt-daemon-config-networkUpgrade libvirt-dbusUpgrade libguestfs-toolsUpgrade qemu-commonUpgrade qemu-kvm-block-iscsiUpgrade ivshmem-toolsUpgrade nbdkit-vddk-pluginUpgrade nbdfuseUpgrade nbdkit-ssh-pluginUpgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade libguestfs-rescueUpgrade python3-hivexUpgrade qemu-kvm-commonUpgrade libnbd-develUpgrade libvirt-daemon-driver-interfaceUpgrade qemuUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-secretUpgrade seabios-binUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-gfs2Upgrade libiscsi-develUpgrade libguestfs-javadocUpgrade libvirt-daemon-kvmUpgrade libvirt-develUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-networkUpgrade seavgabios-binUpgrade libvirtUpgrade qemu-system-x86-coreUpgrade libvirt-daemon-config-nwfilterUpgrade python3-libnbdUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade qemu-system-aarch64-coreUpgrade nbdkit-curl-pluginUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javaUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-glusterUpgrade libguestfs-gobject-develUpgrade ruby-libguestfsUpgrade qemu-kvm-block-sshUpgrade libguestfs-inspect-iconsUpgrade libvirt-bash-completionUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfsUpgrade qemu-kvm-block-rbdUpgrade qemu-imgUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-gzip-pluginUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade libiscsiUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarkingUpgrade nbdkit-basic-filtersUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-serverUpgrade nbdkit-python-pluginUpgrade netcf-develUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade nbdkit-develUpgrade libvirt-lock-sanlockUpgrade libguestfs-winsupportUpgrade hivexUpgrade ruby-hivexUpgrade qemu-system-aarch64Upgrade perl-hivexUpgrade libvirt-daemon-driver-storage-disk | Aug 17, 2021 | Apr 30, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade qemu-vgabiosUpgrade xen-kmp-paeUpgrade qemu-hw-usb-hostUpgrade qemu-ui-cursesUpgrade xen-libsUpgrade qemu-ui-sdlUpgrade qemu-x86Upgrade qemu-audio-alsaUpgrade qemu-linux-userUpgrade qemu-audio-sdlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-dmgUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ivshmem-toolsUpgrade xenUpgrade qemu-chardev-baumUpgrade xen-doc-htmlUpgrade qemu-audio-ossUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-testsuiteUpgrade xen-kmp-defaultUpgrade qemu-vhost-user-gpuUpgrade qemu-block-nfsUpgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade xen-tools-domuUpgrade qemu-guest-agentUpgrade qemu-slofUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-ipxeUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade xen-libs-32bitUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemuUpgrade xen-toolsUpgrade qemu-accel-tcg-x86Upgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-spiceUpgrade qemu-tools | Aug 21, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-sparc | Jul 16, 2021 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub