The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 8, 2016 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-ksmUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-s390xUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ipxeUpgrade qemu-toolsUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxl | Nov 24, 2016 | Nov 24, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub