Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Nov 3, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 12, 2016 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-ui-cursesUpgrade qemu-chardev-spiceUpgrade kvmUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemuUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-ksmUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-audio-ossUpgrade qemu-toolsUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-s390Upgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabios | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub