The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 25, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-kvmUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-chardev-baumUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade qemu-s390Upgrade kvmUpgrade qemu-block-iscsiUpgrade qemu-s390xUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-microvmUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-ui-gtk | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-sparc | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub