The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn't consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Mar 12, 2019 | Dec 13, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-system-aarch64-coreUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-audio-paUpgrade qemu-block-nfsUpgrade qemu-imgUpgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-ui-curses | Aug 28, 2019 | Dec 13, 2018 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemuUpgrade qemu-system-x86-coreUpgrade qemu-block-rbd | May 15, 2019 | Dec 13, 2018 |
| Suse | — | Upgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-x86Upgrade qemu-langUpgrade qemu-extraUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemuUpgrade qemu-kvmUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-hw-display-qxlUpgrade qemu-block-glusterUpgrade qemu-block-dmgUpgrade qemu-ui-openglUpgrade qemu-testsuite | Feb 20, 2019 | Dec 13, 2018 |
| Ubuntu | — | Upgrade qemu-system-dataUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-guiUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-arm | Apr 3, 2019 | Dec 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub