v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 25, 2019 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Jun 17, 2020 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-ui-sdlUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-block-dmgUpgrade qemu-ui-cursesUpgrade qemu-audio-sdlUpgrade qemu-commonUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-block-nfsUpgrade qemu-audio-ossUpgrade qemu-block-gluster | Aug 28, 2019 | Dec 13, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-block-rbdUpgrade qemu-common | Dec 23, 2018 | Nov 22, 2018 |
| Suse | — | Upgrade qemu-testsuiteUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-extraUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-linux-userUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-block-dmgUpgrade qemuUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-armUpgrade qemu-ppcUpgrade kvmUpgrade qemu-sgabios | Feb 16, 2019 | Dec 13, 2018 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-dataUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-guiUpgrade qemu-system-aarch64 | Apr 3, 2019 | Dec 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub