Heap Memory Information Disclosure in QEMU's v9fs_xattrcreate Function

Heap Memory Information Disclosure in QEMU's v9fs_xattrcreate Function

CVE-2016-9103 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.

Learn more about our Web Application Penetration Testing UK.