CVE-2016-9915

CVE-2016-9915 is a memory leak in QEMU’s 9pfs handle backend (hw/9pfs/9p-handle.c). The flaw allows a local privileged guest attacker to cause host memory consumption and potentially QEMU process crash due to a missing cleanup operation in the handle backend. Public documentation confirms the iss...

CVE-2016-9915

Memory leak in hw/9pfs/9p-handle.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in the handle backend...

CVE-2016-9913

Memory leak in the v9fsdeviceunrealizecommon function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash via vectors involving the order of resource cleanup...

CVE-2016-9916

Memory leak in hw/9pfs/9p-proxy.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in the proxy backend...

Fedora 23 : xen (2016-cc2916dcf4)

ARM guests may induce host asynchronous abort XSA-201, CVE-2016-9815, CVE-2016-9816, CVE-2016-9817, CVE-2016-9818 1399747 qemu: Divide by zero vulnerability in cirrusdocopy 1399055 CVE-2016-9921, CVE-2016-9922 Qemu: 9pfs: memory leakage via proxy/handle callbacks 1402278 qemu ioport array overflo...

CVE-2016-7116

Directory traversal vulnerability in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to access host files outside the export path via a .. dot dot in an unspecified string...

CVE-2016-9102

CVE-2016-9102 is a memory-leak vulnerability in QEMU's 9pfs/9p.c v9fs_xattrcreate path. The issue allows a local privileged user (guest) to trigger memory consumption escalating to a DoS by sending a large number of Txattrcreate messages with the same fid. Affected component: hw/9pfs/9p.c (v9fs_x...

CVE-2016-9102

Memory leak in the v9fsxattrcreate function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption and QEMU process crash via a large number of Txattrcreate messages with the same fid number...

CVE-2016-9103

CVE-2016-9103 affects QEMU’s 9pfs/v9fs_xattrcreate in hw/9pfs/9p.c. The vulnerability allows local authenticated guests to obtain sensitive host heap memory information by reading xattribute values before writing to them. Technical context and host-memory disclosure are supported by connected sou...

SUSE SLES11 Security Update : kvm (SUSE-SU-2016:2902-1)

This update for kvm fixes the following issues : - Address various security/stability issues - Fix OOB access in xlnx.xpx-ethernetlite emulation CVE-2016-7161 bsc1001151 - Fix OOB access in VMware SVGA emulation CVE-2016-7170 bsc998516 - Fix DOS in ColdFire Fast Ethernet Controller emulation...

Ubuntu: Security Advisory (USN-3125-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3125-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3125-1 advisory. Zhenhao Hong discovered that QEMU incorrectly handled the Virtio module. A privileged attacker inside the guest could use this issue to cause...

USN-3125-1: QEMU vulnerabilities

Zhenhao Hong discovered that QEMU incorrectly handled the Virtio module. A privileged attacker inside the guest could use this issue to cause QEMU to consume resources, resulting in a denial of service. CVE-2016-5403 Li Qiang discovered that QEMU incorrectly handled VMWARE VMXNET3 network card...

Debian DLA-619-1 : qemu-kvm security update

qemu-kvm built with the VirtFS, host directory sharing via Plan 9 File System 9pfs support, is vulnerable to a directory/path traversal issue. It could occur while creating or accessing files on a shared host directory. A privileged user inside guest could use this flaw to access undue files on t...

Fedora 20 : qemu-1.6.0-10.fc20 (2013-18715)

Fix migration from qemu = 1.5 - Rebase to pending 1.6.1 stable - CVE-2013-4377: Fix crash when unplugging virtio devices bz 1012633, bz 1012641 - Fix 'new snapshot' slowness after the first snap bz 988436 - Fix 9pfs xattrs on kernel 3.11 bz 1013676 - CVE-2013-4344: buffer overflow in...