Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) via vectors involving the order of resource cleanup.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 29, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Suse | — | Upgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-ppcUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-skibootUpgrade qemu-armUpgrade qemu-ipxeUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-hw-display-virtio-vga | Jan 14, 2017 | Dec 29, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-arm | Apr 21, 2017 | Dec 29, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub