PT-2021-28182

Name of the Vulnerable Software and Affected Versions: v9fs affected versions not specified Description: A crash occurs due to a stack-use-after-return READ 8 issue. The crash involves the v9fs string free and v9fs xattrwalk functions, as well as the coroutine trampoline. Recommendations: At the...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Stack-use-after-return in v9fs_string_free

Detailed Report: https://oss-fuzz.com/testcase?key=5024618864836608 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7f08b5858628 Crash...

UBUNTU-CVE-2017-15038

Race condition in the v9fsxattrwalk function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes...

PT-2017-3267

Name of the Vulnerable Software and Affected Versions Qemu affected versions not specified Description The issue is related to a race condition in the v9fs xattrwalk function, which can be exploited to obtain sensitive information from the host's heap memory. This is due to an error when reading...