The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lead do DoS scenario OR possibly lead to code execution on the host.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 12, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-ui-sdlUpgrade qemu-block-iscsiUpgrade qemu-ui-cursesUpgrade qemu-block-curlUpgrade qemu-block-dmgUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-block-nfsUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-system-aarch64 | Aug 28, 2019 | Dec 12, 2018 |
| Oracle_linux | — | Upgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-system-x86 | Dec 23, 2018 | Dec 3, 2018 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-dataUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-guiUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-sparc | Apr 3, 2019 | Dec 12, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub