CVE-2016-9913
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2016
- Updated
- Aug 6, 2024
- Reserved
- Dec 8, 2016
Description
Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) via vectors involving the order of resource cleanup.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 94729vdb-entry
- [qemu-devel] 20161116 [PATCH v3 0/4] 9pfs: add cleanup operation in handle/proxy backendmailing-list
- GLSA-201701-49vendor-advisory
- [oss-security] 20161207 CVE request Qemu: 9pfs: memory leakage via proxy/handle callbacksmailing-list
- [oss-security] 20161208 Re: CVE request Qemu: 9pfs: memory leakage via proxy/handle callbacksmailing-list
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4774718e5c194026ba5ee7a28d9be49be3080e42
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.