Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 12, 2016 |
| Suse | — | Upgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade kvmUpgrade qemu-ui-cursesUpgrade qemuUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-toolsUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-redirectUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-s390 | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub