CVE-2016-9105: Medium severity qemu vulnerability
Memory leak in the v9fslink function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9105?
CVE-2016-9105 has a high severity level due to its potential to cause denial of service through memory consumption.
How do I fix CVE-2016-9105?
To fix CVE-2016-9105, you should update QEMU to a version later than 2.7.1 that addresses the memory leak issue.
What are the affected versions for CVE-2016-9105?
CVE-2016-9105 affects QEMU versions up to and including 2.7.1 and specific versions of openSUSE and Debian.
Who is impacted by CVE-2016-9105?
Local guest OS administrators on systems running affected versions of QEMU can exploit CVE-2016-9105.
What is the impact of CVE-2016-9105?
The impact of CVE-2016-9105 is significant as it can lead to a denial of service due to excessive memory consumption.