CVE-2009-3616 Use after free in n/a

Critical 9.9 Published 23 Oct 2009 Updated 7 Aug 2024

Guest OS users can execute arbitrary code on the host OS via use-after-free flaws in the QEMU VNC server during specific connection states.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2009-3616?

CVE-2009-3616 is a critical use after free vulnerability in Qemu Qemu, published on 23 Oct 2009. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then (1) disconnecting during data transfer, (2) sending a message using incorrect integer data types, or (3) using the Fuzzy Screen Mode protocol, related to double free vulnerabilities.

Weakness: CWE-416

Which versions are affected by CVE-2009-3616?

It affects 3 products.

Products include Qemu Qemu, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.

How do I fix CVE-2009-3616?

Upgrade to a fixed version.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2009-3616 being exploited?

There is no known exploitation of CVE-2009-3616 in the wild and no public exploit code.

All Qemu Qemu vulnerabilities

Sources

Also known as DEBIAN-CVE-2009-3616, GHSA-vmwq-xc6v-xj4j.