PublicDateAtUSN: 2017-04-10
Candidate: CVE-2017-7377
PublicDate: 2017-04-10 15:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7377
 https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html
 http://www.openwall.com/lists/oss-security/2017/04/03/2
 https://ubuntu.com/security/notices/USN-3289-1
Description:
 The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU
 (aka Quick Emulator) allow local guest OS privileged users to cause a
 denial of service (file descriptor or memory consumption) via vectors
 related to an already in-use fid.
Ubuntu-Description:
Notes:
 tyhicks> A privileged user in the guest can leak host memory
 tyhicks> Affected code is in hw/9pfs/virtio-9p.c in older releases
Bugs:
Priority: low
Discovered-by: Li Qiang
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H [6.0 MEDIUM]
 nvd: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H [6.0 MEDIUM]

Patches_qemu-kvm:
upstream_qemu-kvm: needed
precise_qemu-kvm: ignored (reached end-of-life)
precise/esm_qemu-kvm: ignored (end of ESM support, was needed)
trusty_qemu-kvm: DNE
trusty/esm_qemu-kvm: DNE
vivid/ubuntu-core_qemu-kvm: DNE
vivid/stable-phone-overlay_qemu-kvm: DNE
xenial_qemu-kvm: DNE
yakkety_qemu-kvm: DNE
zesty_qemu-kvm: DNE
artful_qemu-kvm: DNE
bionic_qemu-kvm: DNE
cosmic_qemu-kvm: DNE
disco_qemu-kvm: DNE
eoan_qemu-kvm: DNE
focal_qemu-kvm: DNE
groovy_qemu-kvm: DNE
hirsute_qemu-kvm: DNE
devel_qemu-kvm: DNE

Patches_qemu:
 upstream: http://git.qemu-project.org/?p=qemu.git;a=commit;h=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e
upstream_qemu: needed
precise_qemu: DNE
precise/esm_qemu: DNE
trusty_qemu: released (2.0.0+dfsg-2ubuntu1.34)
trusty/esm_qemu: released (2.0.0+dfsg-2ubuntu1.34)
vivid/ubuntu-core_qemu: DNE
vivid/stable-phone-overlay_qemu: DNE
xenial_qemu: released (1:2.5+dfsg-5ubuntu10.14)
esm-infra/xenial_qemu: released (1:2.5+dfsg-5ubuntu10.14)
yakkety_qemu: released (1:2.6.1+dfsg-0ubuntu5.5)
zesty_qemu: released (1:2.8+dfsg-3ubuntu2.2)
artful_qemu: released (1:2.8+dfsg-3ubuntu3)
bionic_qemu: released (1:2.8+dfsg-3ubuntu3)
cosmic_qemu: released (1:2.8+dfsg-3ubuntu3)
disco_qemu: released (1:2.8+dfsg-3ubuntu3)
eoan_qemu: released (1:2.8+dfsg-3ubuntu3)
focal_qemu: released (1:2.8+dfsg-3ubuntu3)
groovy_qemu: released (1:2.8+dfsg-3ubuntu3)
hirsute_qemu: released (1:2.8+dfsg-3ubuntu3)
devel_qemu: released (1:2.8+dfsg-3ubuntu3)