CVE-2017-9374

—

CVSS 3.1

5.5 medium

EPSS

<1%p36

Published

Jun 16, 2017 (Jun 16, 2017)

Modified

Jun 17, 2026

Description

Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.

Vendors: qemu
Products: qemu
Weakness: CWE-401
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.