Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 13, 2016 |
| Suse | — | Upgrade qemu-ppcUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade qemu-ui-spice-coreUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-audio-ossUpgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade kvmUpgrade qemu-armUpgrade qemu-tools | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-ppc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub