Memory corruption in QEMU - CVE-2017-8309
Published: June 6, 2017 / Updated: June 8, 2017
Vulnerability identifier: #VU6942
CSH Severity: Low
CVSS v4: []
CVE-ID: CVE-2017-8309
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows
remote attackers to cause a denial of service (memory consumption) by
repeatedly starting and stopping audio capture.
Affected software
QEMU
Opensuse
Opensuse
How to mitigate CVE-2017-8309
Update to version 2.9.0-r2.