The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Aug 26, 2015 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Jul 30, 2024 | Aug 26, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Aug 26, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Aug 26, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Aug 26, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 13, 2015 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-ui-gtkUpgrade qemu-sgabiosUpgrade qemu-s390xUpgrade xen-libsUpgrade xen-kmp-defaultUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-block-sshUpgrade xen-toolsUpgrade qemu-seabiosUpgrade qemu-ui-spice-coreUpgrade xen-doc-pdfUpgrade qemu-vgabiosUpgrade xenUpgrade xen-doc-htmlUpgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-libs-32bitUpgrade qemu-microvmUpgrade qemu-langUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade kvmUpgrade xen-develUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-guest-agentUpgrade xen-kmp-traceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-domUUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-hw-usb-redirect | Dec 18, 2015 | Aug 26, 2015 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-aarch64 | Nov 8, 2024 | Aug 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub