Уязвимость CVE-2020-35517: Информация
Описание
A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.
Важность: HIGH (8,2) Вектор: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Исправленные пакеты
Имя пакета | Ветка | Исправлено в версии | Версия в репозитории | Errata ID | № Задания | Состояние |
|---|---|---|---|---|---|---|
| qemu | sisyphus | 6.0.0-alt1 | 8.2.2-alt3 | ALT-PU-2021-1767-1 | 271256 | Исправлено |
| qemu | sisyphus_e2k | 7.2.0-alt3.E2K.3 | 7.2.0-alt3.E2K.4 | ALT-PU-2024-1953-1 | - | Исправлено |
| qemu | p10 | 6.0.0-alt1 | 8.2.2-alt0.p10.1 | ALT-PU-2021-1767-1 | 271256 | Исправлено |
| qemu | p10_e2k | 7.2.0-alt3.E2K.0 | 7.2.0-alt3.E2K.3 | ALT-PU-2023-6766-1 | - | Исправлено |
| qemu | c10f1 | 6.0.0-alt1 | 8.2.2-alt0.p10.1 | ALT-PU-2021-1767-1 | 271256 | Исправлено |
Ссылки на рекомендации, решения и инструменты
Ссылка | Ресурс |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1915823 |
|
| https://lists.gnu.org/archive/html/qemu-devel/2021-01/msg05461.html |
|
| https://www.openwall.com/lists/oss-security/2021/01/22/1 |
|
| https://github.com/qemu/qemu/commit/ebf101955ce8f8d72fba103b5151115a4335de2c |
|
| https://security.netapp.com/advisory/ntap-20210312-0002/ |
|
| GLSA-202208-27 |
|