Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 13, 2016 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade kvmUpgrade qemu-ui-cursesUpgrade qemu-s390xUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-sgabios | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-ppc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub