hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 25, 2019 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Jun 17, 2020 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-block-glusterUpgrade qemu-block-dmgUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade qemu-ui-sdlUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64Upgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-block-nfsUpgrade qemu-imgUpgrade qemu-audio-paUpgrade qemu-audio-sdlUpgrade qemu-common | Aug 28, 2019 | Dec 13, 2018 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemu | Dec 23, 2018 | Nov 7, 2018 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-testsuiteUpgrade qemu-langUpgrade qemu-block-glusterUpgrade qemu-ppcUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-block-dmgUpgrade qemu-guest-agentUpgrade qemu-armUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-x86Upgrade qemu-linux-userUpgrade kvmUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemuUpgrade qemu-extraUpgrade qemu-toolsUpgrade qemu-sgabios | Feb 16, 2019 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-arm | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub