CVE-2020-35517: falha em qemu
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.5%
A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.
Produtos afetados
n/a · qemuReferências
https://bugzilla.redhat.com/show_bug.cgi?id=1915823https://github.com/qemu/qemu/commit/ebf101955ce8f8d72fba103b5151115a4335de2chttps://lists.gnu.org/archive/html/qemu-devel/2021-01/msg05461.htmlhttps://security.gentoo.org/glsa/202208-27https://security.netapp.com/advisory/ntap-20210312-0002/https://www.openwall.com/lists/oss-security/2021/01/22/1