Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 13, 2016 |
| Suse | — | Upgrade qemu-toolsUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-hw-usb-redirect | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-misc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub