PT-2023-9641 · Qemu+1 · Qemu+1

Jietao Xiao + 3 · Published 2023-03-07 · Updated 2025-08-12 · CVE-2023-1386

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description A flaw was found in the 9p passthrough filesystem (9pfs) implementation. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

AZL-27767

AZL-35165

BDU:2024-09093

CVE-2023-1386

ECHO-11BD-2260-C895

GHSA-PPJ8-867G-RGJR

Affected Products

Debian

Qemu

References · 20

• https://security-tracker.debian.org/tracker/CVE-2023-1386 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-1386 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-1386 · Security Note
• https://ubuntu.com/security/CVE-2023-1386 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09093 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1386 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-27767 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-1386 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1386 · Security Note
• https://osv.dev/vulnerability/AZL-35165 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1386 · Vendor Advisory
• https://github.com/v9fs/linux/issues/29 · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-1386 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2223985 · Note
• https://secalerts.co/vulnerability/CVE-2023-1386 · Note