hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 25, 2019 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Jun 17, 2020 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-audio-sdlUpgrade qemu-audio-paUpgrade qemu-imgUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-block-nfsUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-audio-oss | Aug 28, 2019 | Dec 13, 2018 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-imgUpgrade qemu-system-aarch64 | Dec 23, 2018 | Nov 7, 2018 |
| Suse | — | Upgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-testsuiteUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-armUpgrade qemu-block-dmgUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-linux-userUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemuUpgrade qemu-kvmUpgrade qemu-extraUpgrade qemu-block-curl | Feb 16, 2019 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-arm | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub