Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
CVSS Details
- CVSS 3.1 Base Score: 7.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | May 30, 2017 | Apr 20, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Jun 17, 2020 | Apr 26, 2018 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade kvmUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-ui-spice-app | Jul 4, 2017 | Apr 20, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-arm | Apr 21, 2017 | Apr 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub