Veracode Vulnerability DatabaseVERACODE:27117Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
qemu is vulnerable to denial of service. A memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 | |
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 |
References
git.qemu.org/?p=qemu.git;a=commit;h=4ffcdef4277a91af15a3c09f7d16af072c29f3f2
www.openwall.com/lists/oss-security/2017/04/25/5
www.securityfocus.com/bid/98012
bugzilla.redhat.com/show_bug.cgi?id=1444781
lists.debian.org/debian-lts-announce/2018/09/msg00007.html
lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html
security.gentoo.org/glsa/201706-03
Related
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C