Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 13, 2016 |
| Suse | — | Upgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-s390Upgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-armUpgrade qemu-s390xUpgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpuUpgrade qemu | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-ppc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub