Wind River Support Network

HomeDefectsLIN1018-2996
Fixed

LIN1018-2996 : Security Advisory - qemu - CVE-2018-19364

Created: Nov 20, 2018    Updated: Jan 21, 2019
Resolved Date: Jan 10, 2019
Found In Version: unknown
Fix Version: 10.18.44.3
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

A use-after-free flaw was found in the VirtFS, host directory sharing via Plan 9 
File System(9pfs) support in QEMU. It could occur due to a race condition while accessing files on a shared host directory. 

A user inside guest could use this flaw to crash the QEMU process resulting in DoS issue. 

Upstream patch: 
--------------- 
  -> https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg01139.html 
  -> https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg02795.html 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19364

CVEs


Live chat
Online