Heap Memory Information Disclosure in QEMU's v9fs_xattrcreate Function
CVE-2016-9103 · MEDIUM Severity
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.
Learn more about our Web Application Penetration Testing UK.