CVE-2017-7471 Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a....
CriticalCVSS 9.0
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/qemu(Debian:12) | < 1:2.8+dfsg-5 | 1:2.8+dfsg-5 |
| debian/qemu(Debian:13) | < 1:2.8+dfsg-5 | 1:2.8+dfsg-5 |
| debian/qemu(Debian:14) | < 1:2.8+dfsg-5 | 1:2.8+dfsg-5 |
| qemu | <= 2.8.1.1 | No fix listed |
| qemu | = 2.9.0-rc0 | No fix listed |
| qemu | = 2.9.0-rc1 | No fix listed |
| qemu | = 2.9.0-rc2 | No fix listed |
| qemu | = 2.9.0-rc3 | No fix listed |
| qemu | = 2.9.0-rc4 | No fix listed |
References
- Debian Security Tracker CVE-2017-7471 vendor-advisory
- [oss-security] 20170419 CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host mailing-list patch third-party-advisory
- 97970 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- git.qemu.org
- GLSA-201706-03 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking