The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | May 30, 2017 | Apr 10, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 10, 2017 |
| Suse | — | Upgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-x86 | Jul 4, 2017 | Apr 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-s390x | May 17, 2017 | Apr 10, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub