The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.- files before the program.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Qemu | Qemu | * | 2.3.0 (including) |
Qemu | Ubuntu | trusty | * |
Qemu | Ubuntu | upstream | * |
Qemu | Ubuntu | utopic | * |
Qemu | Ubuntu | vivid | * |
Qemu-kvm | Ubuntu | precise | * |
Qemu-kvm | Ubuntu | upstream | * |