A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2023-1386 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2223985 | Issue Tracking Third Party Advisory |
| https://github.com/advisories/GHSA-ppj8-867g-rgjr | |
| https://github.com/v9fs/linux/issues/29 | |
| https://security.netapp.com/advisory/ntap-20230831-0005/ |
Configurations
History
17 Apr 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
31 Aug 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Aug 2023, 18:03
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-281 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Qemu
Fedoraproject fedora Fedoraproject Qemu qemu |
|
| CPE | cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
|
| References | (MISC) https://access.redhat.com/security/cve/CVE-2023-1386 - Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2223985 - Issue Tracking, Third Party Advisory |
24 Jul 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-24 16:15
Updated : 2024-04-17 18:15
NVD link : CVE-2023-1386
Mitre link : CVE-2023-1386
CVE.ORG link : CVE-2023-1386
JSON object : View
Products Affected
qemu
- qemu
fedoraproject
- fedora
CWE
CWE-281
Improper Preservation of Permissions