Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-7471

Опубликовано: 09 июл. 2018
Источник: nvd
CVSS3: 9
CVSS2: 7.7
EPSS Низкий

Описание

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 2.8.1.1 (включая)
cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.9.0:rc1:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.9.0:rc2:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.9.0:rc3:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.9.0:rc4:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01153
Низкий

9 Critical

CVSS3

7.7 High

CVSS2

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 9
ubuntu
почти 7 лет назад

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

CVSS3: 7.6
redhat
около 8 лет назад

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

CVSS3: 9
debian
почти 7 лет назад

Quick Emulator (Qemu) built with the VirtFS, host directory sharing vi ...

CVSS3: 9
github
около 3 лет назад

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

oracle-oval
больше 6 лет назад

ELSA-2018-4262: qemu security update (IMPORTANT)

EPSS

Процентиль: 78%
0.01153
Низкий

9 Critical

CVSS3

7.7 High

CVSS2

Дефекты

CWE-732