PT-2016-7652 · Qemu Team+3 · Qemu+3

Li Qiang · Publicado 2016-10-31 · Atualizado 2024-06-15 · CVE-2016-9103

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QEMU (aka Quick Emulator) versions not specified

Description The issue allows local guest OS administrators to obtain sensitive host heap memory information. This is achieved by reading xattribute values before writing to them, leveraging the v9fs xattrcreate function in hw/9pfs/9p.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2017-1043

CVE-2016-9103

DLA-1599-1

DLA-689-1

DLA-698-1

OPENSUSE-SU-2016_3103-1

OPENSUSE-SU-2017_0194-1

OPENSUSE-SU-2024:11287-1

SUSE-SU-2016:2902-1

SUSE-SU-2016:2936-1

SUSE-SU-2016:2988-1

SUSE-SU-2017:0127-1

USN-3125-1

Produtos afetados

Alt Linux

Qemu

Suse

Ubuntu

Referências · 372

• https://suse.com/security/cve/CVE-2019-03812 · Nota
• https://suse.com/security/cve/CVE-2020-11869 · Nota
• https://bugzilla.suse.com/1013285 · Nota
• https://bugzilla.suse.com/1013341 · Nota
• https://bugzilla.suse.com/1014112 · Nota
• https://bdu.fstec.ru/vul/2017-00074 · Nota de Segurança
• https://osv.dev/vulnerability/USN-3125-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17963 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-8379 · Nota
• https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html · Nota
• https://suse.com/security/cve/CVE-2016-10155 · Nota
• https://suse.com/security/cve/CVE-2020-1711 · Nota
• https://suse.com/security/cve/CVE-2016-9101 · Nota
• https://suse.com/security/cve/CVE-2016-9101.html · Nota
• https://security.alpinelinux.org/vuln/CVE-2016-9103 · Nota