hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 25, 2019 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Jun 17, 2020 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-system-aarch64Upgrade qemu-ui-sdlUpgrade qemu-imgUpgrade qemu-audio-paUpgrade qemu-audio-sdlUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-block-dmg | Aug 28, 2019 | Dec 13, 2018 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemuUpgrade qemu-system-aarch64Upgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-block-glusterUpgrade qemu-system-x86Upgrade qemu-block-rbd | Dec 23, 2018 | Nov 7, 2018 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-linux-userUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-s390Upgrade kvmUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-extraUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-block-dmgUpgrade qemu-block-glusterUpgrade qemu-seabiosUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-testsuiteUpgrade qemu-block-rbd | Feb 16, 2019 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub