Description
The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg01790.html ↗
- https://security.gentoo.org/glsa/201611-11 ↗
- http://www.openwall.com/lists/oss-security/2016/10/30/7 ↗
- http://www.openwall.com/lists/oss-security/2016/10/28/1 ↗
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb687602853b4ae656e9236ee4222609f3a6887d ↗
- https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html ↗
- http://www.securityfocus.com/bid/93955 ↗