Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with the same fid number.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 10, 2016 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-microvmUpgrade qemu-s390xUpgrade qemu-ppcUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade kvmUpgrade qemu-armUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabios | Nov 24, 2016 | Nov 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-misc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub