Lucene search
Veracode Vulnerability DatabaseVERACODE:27117HistorySep 21, 2020 - 6:36 a.m.
Denial Of Service (DoS)
2020-09-2106:36:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
26.7%
qemu is vulnerable to denial of service. A memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 | |
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 |
References
git.qemu.org/?p=qemu.git;a=commit;h=4ffcdef4277a91af15a3c09f7d16af072c29f3f2
www.openwall.com/lists/oss-security/2017/04/25/5
www.securityfocus.com/bid/98012
bugzilla.redhat.com/show_bug.cgi?id=1444781
lists.debian.org/debian-lts-announce/2018/09/msg00007.html
lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html
security.gentoo.org/glsa/201706-03
Related
nvd
nvd
CVE-2017-8086
2017-05-02 14:59:00
prion
prion
Memory corruption
2017-05-02 14:59:00
redhatcve
redhatcve
CVE-2017-8086
2017-04-25 06:48:04
cvelist
cvelist
CVE-2017-8086
2017-05-02 14:00:00
debiancve
debiancve
CVE-2017-8086
2017-05-02 14:59:00
cve
cve
CVE-2017-8086
2017-05-02 14:59:00
osv
osv
CVE-2017-8086
2017-05-02 14:59:00
qemu-kvm - security update
2017-05-30 00:00:00
qemu - security update
2017-07-21 00:00:00
ubuntucve
ubuntucve
CVE-2017-8086
2017-05-02 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-965-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-3289-1)
2017-05-17 00:00:00
Debian: Security Advisory (DLA-1035-1)
2018-02-07 00:00:00
debian
debian
[SECURITY] [DLA 965-1] qemu-kvm security update
2017-05-31 06:12:28
[SECURITY] [DLA 1035-1] qemu security update
2017-07-21 15:17:41
[SECURITY] [DLA 1497-1] qemu security update
2018-09-06 18:49:12
nessus
nessus
Debian DLA-965-1 : qemu-kvm security update
2017-05-31 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3289-1)
2017-05-17 00:00:00
Debian DLA-1035-1 : qemu security update
2017-07-24 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2017-05-16 00:00:00
gentoo
gentoo
QEMU: Multiple vulnerabilities
2017-06-06 00:00:00
suse
suse
Security update for kvm (important)
2017-11-10 09:05:35
Security update for qemu (important)
2017-07-04 21:16:50
Security update for qemu (important)
2017-07-15 00:10:54