CVE-2016-9104
Medium
Description
Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
SeverityMedium
CVSS4.4
Exploit probability—
Product
Qemu
PublishedDec 9, 2016
First seenDec 9, 2016
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qemu qemu | v ≤ 2.7.1 | — |
| debian debian_linux | 8.0 | — |
| opensuse leap | 42.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.