Detections
Analytics
CVE-2017-5579
medium
Description
Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
References
https://security.gentoo.org/glsa/201702-28
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
https://access.redhat.com/errata/RHSA-2017:2408
https://access.redhat.com/errata/RHSA-2017:2392
http://www.securityfocus.com/bid/95780
http://www.openwall.com/lists/oss-security/2017/01/25/3
http://www.openwall.com/lists/oss-security/2017/01/24/8