CVE-2017-7377 PUBLISHED

The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.

EPSS 0.08% · 22.4th percentile

Risk Scores

EPSS Score
0.08%
22.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSqemu0, 1:2.4+dfsg-4ubuntu1, 1:2.4+dfsg-4ubuntu3
Ubuntu:14.04:LTSqemu1.7.0+dfsg-2ubuntu8, 1.7.0+dfsg-3ubuntu1~ppa1, 1.7.0+dfsg-3ubuntu1

Timeline

References

Open in Interactive Console →