CVE-2018-19489 — Race Condition in Qemu

CWE-362 — Race Condition9 documents7 sources
Severity
4.7MEDIUMNVD
OSV7.8
EPSS
0.0%
top 87.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
QemuDebian QemuCanonical Ubuntu Linux+3 more
Timeline
PublishedDec 13
Latest updateMay 13

Description

v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6

Affected Packages5 packages

▶debiandebian/qemu< qemu 1:3.1+dfsg-1 (bookworm)
▶Debianqemu/qemu< 1:3.1+dfsg-1+3
▶Ubuntuqemu/qemu< 2.0.0+dfsg-2ubuntu1.45+2
▶NVDqemu/qemu3.0.0+1
▶NVDopensuse/leap42.3

Also affects: Debian Linux 8.0, 9.0, Fedora 29, Ubuntu Linux 14.04, 16.04, 18.04, 18.10

Patches

Patch: www.openwall.com ↗Patch: lists.gnu.org ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-fh27-82wq-79r2: v9fs_wstat in hw/9pfs/9p↗2022-05-13
▶
OSV
qemu vulnerabilities↗2019-03-27
▶
OSV
CVE-2018-19489: v9fs_wstat in hw/9pfs/9p↗2018-12-13
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2019-03-27
▶
Red Hat
QEMU: 9pfs: crash due to race condition in renaming files↗2018-11-22
▶
Debian
CVE-2018-19489: qemu - v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of se...↗2018
▶

💬Community

2
Bugzilla
CVE-2018-19489 qemu: 9pfs: use-after-free due to race condition in renaming files [fedora-all]↗2018-11-26
▶
Bugzilla
CVE-2018-19489 QEMU: 9pfs: crash due to race condition in renaming files↗2018-11-26
▶