Quick Emulator(Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to a memory leakage issue. It could occur when calling v9fs_write call. A privileged user inside guest could use this flaw to leak the host memory bytes resulting in DoS for other services. Upstream patches: ----------------- https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02623.html Reference: ---------- -> http://wiki.qemu.org/Documentation/9psetup
Acknowledgments: Name: Li Qiang (360.cn Inc.)
Created xen tracking bugs for this issue: Affects: fedora-all [bug 1389714]
Created qemu tracking bugs for this issue: Affects: fedora-all [bug 1389713]
CVE assignment: http://seclists.org/oss-sec/2016/q4/282
commit fdfcc9aeea1492f4b819a24c94dfb678145b1bf9 Author: Li Qiang <liqiang6-s> Date: Mon Oct 17 14:13:58 2016 +0200 9pfs: fix memory leak in v9fs_write