CVE-2018-19364

hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome.

• CWE-416

• http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2018/11/20/1Mailing List, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00023.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/
• https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg01139.htmlMailing List, Patch, Vendor Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg02795.htmlMailing List, Patch, Vendor Advisory
• https://seclists.org/bugtraq/2019/May/76Mailing List, Third Party Advisory
• https://usn.ubuntu.com/3826-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4454Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2018/11/20/1Mailing List, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00023.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/
• https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg01139.htmlMailing List, Patch, Vendor Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg02795.htmlMailing List, Patch, Vendor Advisory
• https://seclists.org/bugtraq/2019/May/76Mailing List, Third Party Advisory
• https://usn.ubuntu.com/3826-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4454Third Party Advisory

Published

Dec 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19358GNOME Keyring through 3.28.2 allows local users to retrieve …
• CVE-2018-19359GitLab Community and Enterprise Edition 8.9 and later and be…
• CVE-2018-1936IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable…8.4
• CVE-2018-19360FasterXML jackson-databind 2.x before 2.9.8 might allow atta…
• CVE-2018-19361FasterXML jackson-databind 2.x before 2.9.8 might allow atta…
• CVE-2018-19362FasterXML jackson-databind 2.x before 2.9.8 might allow atta…
• CVE-2018-19365The REST API in Wowza Streaming Engine 4.7.4.01 allows trave…9.1
• CVE-2018-19367Portainer through 1.19.2 provides an API endpoint (/api/user…
• CVE-2018-1937IBM Cloud Private 3.1.1 could alllow a local user with admin…4.4
• CVE-2018-19370A Race condition vulnerability in unzip_file in admin/import…
• CVE-2018-19371The SaveUserSettings service in Content Manager in SDL Web 8…
• CVE-2018-19374Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local…