Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9103

Опубликовано: 08 окт. 2016
Источник: redhat
CVSS3: 4.1
CVSS2: 2.3
EPSS Низкий

Описание

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kvmNot affected
Red Hat Enterprise Linux 5xenNot affected
Red Hat Enterprise Linux 6qemu-kvmNot affected
Red Hat Enterprise Linux 7qemu-kvmWill not fix
Red Hat Enterprise Linux 7qemu-kvm-rhevWill not fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)qemu-kvm-rhevNot affected
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)qemu-kvm-rhevNot affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)qemu-kvm-rhevNot affected
Red Hat OpenStack Platform 8 (Liberty)qemu-kvm-rhevNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1389642Qemu: 9pfs: information leakage via xattr

EPSS

Процентиль: 32%
0.00393
Низкий

4.1 Medium

CVSS3

2.3 Low

CVSS2

Связанные уязвимости

CVSS3: 6
ubuntu
больше 9 лет назад

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.

CVSS3: 6
nvd
больше 9 лет назад

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.

CVSS3: 6
debian
больше 9 лет назад

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emula ...

CVSS3: 6
github
больше 4 лет назад

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.

suse-cvrf
больше 9 лет назад

Security update for qemu

EPSS

Процентиль: 32%
0.00393
Низкий

4.1 Medium

CVSS3

2.3 Low

CVSS2