Memory leak in the usbxhciexit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consumption and possibly QEMU process crash) by repeatedly unplugging a USB device.
{
"unresolved_ranges": [
{
"cpe": "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10"
}
]
},
{
"cpe": "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "11"
}
]
},
{
"cpe": "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "8"
}
]
},
{
"cpe": "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "9"
}
]
},
{
"cpe": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "42.2"
}
]
}
]
}{
"cpe": [
"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*"
],
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "2.7.1"
},
{
"last_affected": "6.0"
},
{
"last_affected": "7.0"
},
{
"last_affected": "4.0"
}
]
}