CVE-2017-15038

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.

References

http://www.openwall.com/lists/oss-security/2017/10/06/1

https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html

https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg00729.html

https://usn.ubuntu.com/3575-1/

https://www.debian.org/security/2018/dsa-4213

Details

Source: MITRE

Published: 2017-10-10

Updated: 2018-09-07

Type: CWE-362

Risk Information

CVSS v2

Base Score: 1.9

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 3.4

Severity: LOW

CVSS v3

Base Score: 5.6

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score: 4

Exploitability Score: 1.1

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* versions up to 2.9.1 (inclusive)

Tenable Plugins

View all (17 total)

IDNameProductFamilySeverity
136276EulerOS Virtualization for ARM 64 3.0.2.0 : qemu-kvm (EulerOS-SA-2020-1573)NessusHuawei Local Security Checks
critical
117351Debian DLA-1497-1 : qemu security update (Spectre)NessusDebian Local Security Checks
critical
110208Debian DSA-4213-1 : qemu - security update (Spectre)NessusDebian Local Security Checks
critical
107145Ubuntu 14.04 LTS / 16.04 LTS : qemu regression (USN-3575-2)NessusUbuntu Local Security Checks
critical
106927Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : qemu vulnerabilities (USN-3575-1)NessusUbuntu Local Security Checks
critical
105928Fedora 27 : 2:qemu (2017-8db9c497f9)NessusFedora Local Security Checks
high
104780SUSE SLES11 Security Update : kvm (SUSE-SU-2017:3084-1)NessusSuSE Local Security Checks
critical
104495SUSE SLES12 Security Update : qemu (SUSE-SU-2017:2969-1)NessusSuSE Local Security Checks
critical
104494SUSE SLES11 Security Update : kvm (SUSE-SU-2017:2963-1)NessusSuSE Local Security Checks
critical
104471SUSE SLES12 Security Update : qemu (SUSE-SU-2017:2946-1)NessusSuSE Local Security Checks
critical
104446Fedora 26 : 2:qemu (2017-9149114fba)NessusFedora Local Security Checks
high
104429SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:2936-1)NessusSuSE Local Security Checks
high
104424openSUSE Security Update : qemu (openSUSE-2017-1249)NessusSuSE Local Security Checks
high
104423openSUSE Security Update : qemu (openSUSE-2017-1248)NessusSuSE Local Security Checks
high
104376SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:2924-1)NessusSuSE Local Security Checks
high
103714Debian DLA-1129-1 : qemu security updateNessusDebian Local Security Checks
high
103713Debian DLA-1128-1 : qemu-kvm security updateNessusDebian Local Security Checks
high