Base Score

MEDIUM4.7

CVE-2018-19489

v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.

VectorLOCAL

Published Bycve@mitre.org

Published DateDec 13, 2018, 19:29

Weakness Type (CWE):CWE-362

CVSS Metrics

Base Score

4.7

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

References

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html
http://www.openwall.com/lists/oss-security/2018/11/26/1
http://www.securityfocus.com/bid/106007
https://exchange.xforce.ibmcloud.com/vulnerabilities/153326
https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1d20398694a3b67a388d955b7a945ba4aa90a8a8
https://lists.debian.org/debian-lts-announce/2019/01/msg00023.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/
https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg04489.html
https://seclists.org/bugtraq/2019/May/76
https://security-tracker.debian.org/tracker/CVE-2018-19489
https://usn.ubuntu.com/3923-1/
https://www.debian.org/security/2019/dsa-4454

Base Score

MEDIUM4.7

Weakness Type (CWE):CWE-362

CVSS Metrics

Base Score

4.7

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH