Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with the same fid number.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 10, 2016 |
| Suse | — | Upgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-audio-paUpgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-ui-gtkUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemuUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vga | Nov 24, 2016 | Nov 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub