CVE-2017-9373: Medium severity Qemu Qemu vulnerability
Last updated 24 July 2024
Other sources
Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.
— Launchpad
Quick emulator built with the IDE AHCI Emulation support is vulnerable to a host memory leakage issue. It could occur while hot-unplugging the AHCI device.
A privileged user inside guest could use this flaw to leak host memory resulting in DoS.
Upstream patch: --------------- -> http://git.qemu.org/?p=qemu.git;a=commitdiff;h=d68f0f778e7f4fbd674627274267f269e40f0b04
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/06/05/1
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9373?
CVE-2017-9373 is a vulnerability in QEMU (aka Quick Emulator) that allows local guest OS privileged users to cause a denial of service by consuming excessive memory.
How does CVE-2017-9373 affect systems?
CVE-2017-9373 affects systems that have QEMU built with IDE AHCI Emulation support.
What is the severity of CVE-2017-9373?
CVE-2017-9373 has a low severity rating.
How can the CVE-2017-9373 vulnerability be fixed?
To fix the CVE-2017-9373 vulnerability, update QEMU to version 2.0.0+dfsg-2ubuntu1.35 or later.
Where can I find more information about CVE-2017-9373?
More information about CVE-2017-9373 can be found at the following references: [1], [2], [3].