SUSE CVE-2016-9913

Memory leak in the v9fsdeviceunrealizecommon function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash via vectors involving the order of resource cleanup...

SUSE CVE-2016-9916

Memory leak in hw/9pfs/9p-proxy.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in the proxy backend...

SUSE CVE-2017-7377

The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...

SUSE CVE-2017-7493

Quick Emulator Qemu built with the VirtFS, host directory sharing via Plan 9 File System9pfs support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges...

SUSE CVE-2017-15038

Race condition in the v9fsxattrwalk function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes...

SUSE CVE-2018-19364

hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...

SUSE CVE-2018-19489

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

SUSE CVE-2019-16413

An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect isizewrite properly, which causes an isizeread infinite loop and denial of service on SMP systems...

PT-2023-33255 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential socket leak was identified in the p9 socket open function of the net/9p protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-36529 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to the 9p/trans fd functionality, where it does not always use O NONBLOCK for read/write operations. The actual impact and potential for attack have not been proven ye...

PT-2022-36462 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue is related to the 9p/trans fd file, where it does not always use O NONBLOCK for read/write operations. The actual impact and attack plausibility have not yet been proven...

PT-2024-11880 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential socket leak issue has been identified in the Linux kernel, specifically in the p9 socket open function within the net/9p module. The issue arises when p9 fd create tcp and ...

FreeBSD 安全漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD. An attacker exploited the vulnerability to trigger a buffer overflow in FreeBSD via 9p message handling to trigger a denial of service and potentially run code on the host syst...

OESA-2021-1218 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially...

DEBIAN-CVE-2021-20181

A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality,...

The vulnerability of the v9fs_wstat function (hw/9pfs/9p.c) in the QEMU hardware emulation software allows a hacker to trigger a service failure.

The vulnerability of the v9fswstat function hw/9pfs/9p.c in the QEMU hardware emulation software is related to the use of a shared resource with incorrect synchronization during file renaming. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the hw/9pfs/cofile.c and hw/9pfs/9p.c components of the QEMU hardware emulation software allows a attacker to trigger a service failure by repeatedly accessing the freed memory area.

The vulnerability in the components hw/9pfs/cofile.c and hw/9pfs/9c.c of the QEMU hardware emulator involves repeated access to a freed memory area. Exploiting this vulnerability can allow an attacker to cause a system failure...

DEBIAN-CVE-2019-16413

An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect isizewrite properly, which causes an isizeread infinite loop and denial of service on SMP systems...

UBUNTU-CVE-2019-16413

An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect isizewrite properly, which causes an isizeread infinite loop and denial of service on SMP systems...

Linux kernel denial of service vulnerability (CNVD-2019-32353)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.0.4, which stems from the failure of the 9p file system to properly protect isizewrite. An attacker...