hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 25, 2019 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Jun 17, 2020 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-block-sshUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-block-glusterUpgrade qemu-audio-sdlUpgrade qemu-audio-alsaUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-imgUpgrade qemu-audio-paUpgrade qemu-system-aarch64Upgrade qemu-ui-sdlUpgrade qemu-block-rbdUpgrade qemu-block-nfs | Aug 28, 2019 | Dec 13, 2018 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade ivshmem-tools | Dec 23, 2018 | Nov 7, 2018 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-vgabiosUpgrade kvmUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-extraUpgrade qemu-linux-userUpgrade qemu-block-curlUpgrade qemuUpgrade qemu-kvmUpgrade qemu-testsuiteUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-block-glusterUpgrade qemu-ppcUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-arm | Feb 16, 2019 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mips | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub