Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.
CVSS Details
- CVSS 3.0 Base Score: 5.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | May 31, 2018 | Oct 9, 2017 |
| Oracle_linux | — | Upgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-block-glusterUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemu-system-aarch64-coreUpgrade ivshmem-tools | May 15, 2019 | Oct 4, 2017 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-vgabiosUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemuUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade qemu-audio-ossUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-ksmUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-chardev-spice | Nov 2, 2017 | Oct 9, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390x | Feb 21, 2018 | Oct 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub