PT-2016-7655 · Qemu+3 · Qemu+3
Li Qiang
·
Publicado
2016-10-31
·
Atualizado
2024-06-15
·
CVE-2016-9106
CVSS v3.1
6.0
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
QEMU (aka Quick Emulator) versions prior to the fixed version
Description
A memory leak issue exists due to the failure to free an IO vector in the v9fs write function, located in hw/9pfs/9p.c. This allows local guest OS administrators to cause a denial of service by consuming memory.
Recommendations
For versions prior to the fixed version, consider applying a patch that fixes the memory leak issue in the v9fs write function as a permanent solution. As a temporary workaround, restrict access to the v9fs write function to minimize the risk of exploitation.
Correção
DoS
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Qemu
Suse
Ubuntu