oss-sec mailing list archives
Re: CVE request Qemu: usb: redirector: memory leakage when destroying
From: <cve-assign () mitre org>
Date: Thu, 8 Dec 2016 01:32:16 -0500
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Quick Emulator(Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host. https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg01379.html http://git.qemu.org/?p=qemu.git;a=commit;h=07b026fd82d6cf11baf7d7c603c4f5f6070b35bf
it doesn't free the vm change state handler
Use CVE-2016-9907. - -- CVE Assignment Team M/S M300, 202 Burlington Road, Bedford, MA 01730 USA [ A PGP key is available for encrypted communications at http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJYSPvuAAoJEHb/MwWLVhi2broP/2fJ5v5oVmb9x0tsuXAjZ1Ba aXQDcdYBS0GUbME9pWh1rjuHtlYtiwocTpDLRIph38oyyre+ejrTQoqdp8S7pkVL oB/ENczkJM94VM88tl+lVs53x+0iZl+a2Xs0K7vFLsc+vYhPeXyzyM0PVm90AjNV vlM9sYQDfmZ7LzsQr6CyvOmwe1xfs/1Zo6U62qPkdmjFeBNhUGg/F+NoVv2U2yaQ ArsgSON2QE7eyLvpawFqbnWSKITrYKp+3WIEQxRDScWl1dgSY4CPKxBFiKGM7odu np7PtDRiJp3S9o9IYAkvJ9B07meSqiy6HLubLDXQsKmV+9S08lXNAhmNo6Esed42 AIMcasrZNA7S1fCNXM9zykphS/ku3kZKzvdrHxJM7zHtMg9PcKi8fPKybX8ddNju suLCPt6HsCNjK/a3duxMJAeUaxo6bgGJa5QdZ7skUzSEKt3ffUPmSDNQG4rjz3N6 W8RPnbTGCFkNSTmzbIoR6Ho5ttZZ7TTXXTQpQRPuUUiZ5f+p3kII7cQN+z+/Hn61 UCHkc4NJNnn9tK8M9NBELx6VomVtqWAzMhxw3FcO6eekPW40mMrCuoM+IkQp0a9d l9OYJP6Zihlpfa8Nm0kzk26+V+hLR4aXv/zaCzDm9ipe2NRckn6ZIltYzoW7waeI Co2uP2bGilgPtZnQhnBK =0MJ9 -----END PGP SIGNATURE-----
Current thread:
- CVE request Qemu: usb: redirector: memory leakage when destroying redirector P J P (Dec 06)
- Re: CVE request Qemu: usb: redirector: memory leakage when destroying cve-assign (Dec 07)