Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-8086

Опубликовано: 02 мая 2017
Источник: debian
EPSS Низкий

Описание

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
qemufixed1:2.8+dfsg-5package
qemu-kvmremovedpackage

Примечания

  • Fixed by: http://git.qemu.org/?p=qemu.git;a=commit;h=4ffcdef4277a91af15a3c09f7d16af072c29f3f2 (v2.9.0-rc4)

  • Introduced possibly by the fix d10142c11bdcecebe97fd834a834167053b7a05c to

  • partially fix CVE-2016-9602.

EPSS

Процентиль: 35%
0.00423
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 9 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

CVSS3: 3
redhat
больше 9 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

CVSS3: 6.5
nvd
больше 9 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

CVSS3: 6.5
github
больше 4 лет назад

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

suse-cvrf
около 9 лет назад

Security update for qemu

EPSS

Процентиль: 35%
0.00423
Низкий