tocsin

Debian/qemu: unknown

Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.

Action: Upgrade qemu to 1.7.0+dfsg-4 or later.

Affected

introducedfixedlast affected
01.7.0+dfsg-4-

Fixed versions

1.7.0+dfsg-4

Sources

published · modified · JSON