PT-2018-3377
CVE-2018-19489
·
Published
2018-11-22
·
Updated
2020-05-12
Description by
CVSS 2.0
4.9
MediumMetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
QEMU (affected versions not specified)
Description:
The issue is related to the use of a shared resource with incorrect synchronization during file renaming in the QEMU hardware emulator, specifically in the
v9fs wstat function. This can be exploited to cause a denial of service, resulting in a crash. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾