CVE-2017-15038

MEDIUM5.6

Race condition in the v9fs_xattrwalk function in hw/9pfs/9p

Published Oct 9, 2017

Modified 1 years ago

Details

Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.

References

WEB

http://www.openwall.com/lists/oss-security/2017/10/06/1

WEB

https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html

WEB

https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg00729.html

ADVISORY

https://usn.ubuntu.com/3575-1/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2017-15038

ADVISORY

https://www.debian.org/security/2018/dsa-4213

CVSS Analysis

CVSS v3.0

5.6

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Ecosystems

Timeline

PublishedOct 9, 2017

ModifiedAug 5, 2024