CVE-2017-15268: Qemu

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.

Affected products

• Qemu Qemu: up to and including 2.10.0

Published 2017-10-12. Last modified 2026-06-17.