Lucene search
Veracode Vulnerability DatabaseVERACODE:26813HistorySep 21, 2020 - 6:19 a.m.
Denial Of Service (DoS)
2020-09-2106:19:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
0.001 Low
EPSS
Percentile
26.9%
qemu:xenial is vulnerable to denial of service (DoS).The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 | |
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 |
References
git.qemu-project.org/?p=qemu.git;a=commit;h=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e
www.openwall.com/lists/oss-security/2017/04/03/2
www.securityfocus.com/bid/97319
bugzilla.redhat.com/show_bug.cgi?id=1437871
lists.debian.org/debian-lts-announce/2018/09/msg00007.html
lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html
security.gentoo.org/glsa/201706-03
Related
cvelist
cvelist
CVE-2017-7377
2017-04-10 15:00:00
cve
cve
CVE-2017-7377
2017-04-10 15:59:00
nvd
nvd
CVE-2017-7377
2017-04-10 15:59:00
prion
prion
Design/Logic Flaw
2017-04-10 15:59:00
osv
osv
CVE-2017-7377
2017-04-10 15:59:00
qemu-kvm - security update
2017-05-30 00:00:00
qemu - security update
2017-07-21 00:00:00
ubuntucve
ubuntucve
CVE-2017-7377
2017-04-10 00:00:00
redhatcve
redhatcve
CVE-2017-7377
2020-04-08 19:53:39
debiancve
debiancve
CVE-2017-7377
2017-04-10 15:59:00
fedora
fedora
[SECURITY] Fedora 24 Update: xen-4.6.5-5.fc24
2017-04-14 22:20:07
[SECURITY] Fedora 25 Update: xen-4.7.2-5.fc25
2017-04-09 02:57:00
[SECURITY] Fedora 25 Update: qemu-2.7.1-7.fc25
2017-07-25 21:29:02
nessus
nessus
Fedora 25 : xen (2017-054729ab08)
2017-04-10 00:00:00
Fedora 24 : xen (2017-03dc811be6)
2017-04-17 00:00:00
Debian DLA-965-1 : qemu-kvm security update
2017-05-31 00:00:00
openvas
openvas
Fedora Update for xen FEDORA-2017-054729ab08
2017-04-10 00:00:00
Fedora Update for xen FEDORA-2017-03dc811be6
2017-04-15 00:00:00
Debian: Security Advisory (DLA-965-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DLA 965-1] qemu-kvm security update
2017-05-31 06:12:28
[SECURITY] [DLA 1035-1] qemu security update
2017-07-21 15:17:41
[SECURITY] [DLA 1497-1] qemu security update
2018-09-06 18:49:12
ubuntu
ubuntu
QEMU vulnerabilities
2017-05-16 00:00:00
gentoo
gentoo
QEMU: Multiple vulnerabilities
2017-06-06 00:00:00
suse
suse
Security update for qemu (important)
2017-07-04 21:16:50
Security update for qemu (important)
2017-07-15 00:10:54
Security update for qemu (important)
2017-11-10 09:19:55