PT-2016-7654 · Qemu+3 · Qemu+3
Li Qiang
·
Publicado
2016-10-31
·
Atualizado
2024-06-15
·
CVE-2016-9105
CVSS v3.1
6.0
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
QEMU (aka Quick Emulator) versions prior to the fixed version
Description
A memory leak issue exists in the v9fs link function, located in hw/9pfs/9p.c, allowing local guest OS administrators to cause a denial of service by consuming memory. This can be achieved through vectors involving a reference to the source fid object.
Recommendations
For QEMU versions prior to the fixed version, update to the latest version to resolve the memory leak issue. As a temporary workaround, consider restricting access to the v9fs link function to minimize the risk of exploitation.
Correção
DoS
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Qemu
Suse
Ubuntu