PT-2018-3501 · Qemu+2 · Qemu+2
Michael Hanselmann
·
Publicado
2018-11-29
·
Atualizado
2020-05-14
·
CVE-2018-16867
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
qemu versions prior to 3.1.0
Description:
A flaw in the qemu Media Transfer Protocol (MTP) implementation allows for a path traversal due to improper filename sanitization in the
usb mtp write data function. This can lead to reading and writing arbitrary files, potentially causing a denial of service (DoS) scenario or possibly allowing code execution on the host. The issue is related to errors in synchronization when using a shared resource.Recommendations:
For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
usb mtp write data function in the hw/usb/dev-mtp.c file to minimize the risk of exploitation.Correção
DoS
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Ubuntu
Qemu