The vulnerability in the hw/9pfs/codir.c component of the QEMU hardware emulation software allows a hacker to induce a service failure.

The vulnerability of the hw/9pfs/codir.c component of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...

Use-After-Free

qemu is vulnerable to use-after-free. hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...

CVE-2018-19489: Concurrent Execution using Shared Resource with Improper Synchronization

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

CVE-2018-19364: Use After Free

hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...

CVE-2018-19364

hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...

CVE-2017-15038: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the v9fsxattrwalk function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes...

CVE-2017-7377: Missing Release of Resource after Effective Lifetime

The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...

CVE-2016-9915: Missing Release of Memory after Effective Lifetime

Memory leak in hw/9pfs/9p-handle.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in the handle backend...

CVE-2016-9914: Missing Release of Memory after Effective Lifetime

Memory leak in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in FileOperations...

CVE-2016-7116: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to access host files outside the export path via a .. dot dot in an unspecified string...

CVE-2016-9102

Memory leak in the v9fsxattrcreate function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption and QEMU process crash via a large number of Txattrcreate messages with the same fid number...

CVE-2016-9105: Missing Release of Resource after Effective Lifetime

Memory leak in the v9fslink function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via vectors involving a reference to the source fid object...

CVE-2016-9102: Missing Release of Resource after Effective Lifetime

Memory leak in the v9fsxattrcreate function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption and QEMU process crash via a large number of Txattrcreate messages with the same fid number...

CVE-2016-9104: Integer Overflow or Wraparound

Multiple integer overflows in the 1 v9fsxattrread and 2 v9fsxattrwrite functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS administrators to cause a denial of service QEMU process crash via a crafted offset, which triggers an out-of-bounds access...

CVE-2016-9106: Missing Release of Resource after Effective Lifetime

Memory leak in the v9fswrite function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption by leveraging failure to free an IO vector...

CVE-2016-8577: Missing Release of Resource after Effective Lifetime

Memory leak in the v9fsread function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via vectors related to an I/O read operation...