Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 13, 2016 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemu-ksmUpgrade qemu-ui-spice-appUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade kvmUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-sgabios | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub