CVE-2017-7377

Name of the Vulnerable Software and Affected Versions QEMU (aka Quick Emulator) versions prior to the fixed version

Description The issue allows local guest OS privileged users to cause a denial of service, specifically file descriptor or memory consumption, via certain vectors related to an already in-use fid. This is due to the v9fs create and v9fs lcreate functions in hw/9pfs/9p.c.

Recommendations For QEMU versions prior to the fixed version, consider restricting access to the v9fs create and v9fs lcreate functions as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.