Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5579