Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.
CVSS Details
- CVSS 3.0 Base Score: 5.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | May 31, 2018 | Oct 9, 2017 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-system-x86Upgrade qemuUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-core | May 15, 2019 | Oct 4, 2017 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-ipxeUpgrade qemu-ui-cursesUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-armUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-x86Upgrade qemu-s390xUpgrade kvmUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-vgabiosUpgrade qemu-tools | Nov 2, 2017 | Oct 9, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparc | Feb 21, 2018 | Oct 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub