Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-8086

Опубликовано: 02 мая 2017
Источник: debian
EPSS Низкий

Описание

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
qemufixed1:2.8+dfsg-5package
qemu-kvmremovedpackage

Примечания

  • Fixed by: http://git.qemu.org/?p=qemu.git;a=commit;h=4ffcdef4277a91af15a3c09f7d16af072c29f3f2 (v2.9.0-rc4)

  • Introduced possibly by the fix d10142c11bdcecebe97fd834a834167053b7a05c to

  • partially fix CVE-2016-9602.

EPSS

Процентиль: 23%
0.00076
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

CVSS3: 3
redhat
почти 9 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

CVSS3: 6.5
nvd
почти 9 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

CVSS3: 6.5
github
больше 3 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

suse-cvrf
больше 8 лет назад

Security update for qemu

EPSS

Процентиль: 23%
0.00076
Низкий