PT-2023-9641 · Qemu+1 · Qemu+1

Jietao Xiao + 3 · Publicado 2023-03-07 · Atualizado 2025-08-12 · CVE-2023-1386

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description A flaw was found in the 9p passthrough filesystem (9pfs) implementation. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Enumeração de Fraquezas

CWE-281

Identificadores relacionados

AZL-27767

AZL-35165

BDU:2024-09093

CVE-2023-1386

ECHO-11BD-2260-C895

GHSA-PPJ8-867G-RGJR

Produtos afetados

Debian

Qemu

Referências · 20

• https://github.com/v9fs/linux/issues/29 · Nota
• https://docs.bell-sw.com/security/cves/CVE-2023-1386 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2223985 · Nota
• https://security-tracker.debian.org/tracker/CVE-2023-1386 · Aviso do Fabricante
• https://osv.dev/vulnerability/BELL-CVE-2023-1386 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-1386 · Nota de Segurança
• https://secalerts.co/vulnerability/CVE-2023-1386 · Nota
• https://ubuntu.com/security/CVE-2023-1386 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-09093 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1386 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-27767 · Aviso do Fabricante
• https://github.com/advisories/GHSA-ppj8-867g-rgjr · Nota
• https://osv.dev/vulnerability/CVE-2023-1386 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2023-1386 · Nota
• https://security.netapp.com/advisory/ntap-20230831-0005 · Nota