Описание
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | released | 0.20151104-1ubuntu0.1~esm1 |
| esm-apps/bionic | released | 0.20170904-1ubuntu0.18.04.1~esm1 |
| esm-apps/focal | released | 0.20170904-1ubuntu0.20.04.1~esm1 |
| esm-apps/jammy | released | 0.20170904-1.1ubuntu0.1~esm2 |
| esm-apps/xenial | released | 0.20151104-1ubuntu0.1~esm1 |
| jammy | needed | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 1:8.0.4+dfsg-1ubuntu5 |
| esm-infra-legacy/trusty | released | 2.0.0+dfsg-2ubuntu1.47+esm6 |
| esm-infra-legacy/xenial | released | 1:2.5+dfsg-5ubuntu10.51+esm4 |
| esm-infra/bionic | released | 1:2.11+dfsg-1ubuntu7.42+esm5 |
| esm-infra/focal | released | 1:4.2-3ubuntu6.28 |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| focal | released | 1:4.2-3ubuntu6.28 |
| jammy | released | 1:6.2+dfsg-2ubuntu6.16 |
| kinetic | ignored | end of life, was needed |
Показывать по
EPSS
6 Medium
CVSS3
Связанные уязвимости
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
A flaw was found in the 9p passthrough filesystem (9pfs) implementatio ...
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
EPSS
6 Medium
CVSS3