CoreCVE
Back

HIGH

QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405

Published Aug 29, 2022

Description

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

Affected products

Remediation

Red Hat statement

This issue does not affect the versions of the `qemu-kvm` package as shipped with Red Hat Enterprise Linux 6 and 7. Virtio-fs is a fairly new feature (introduced upstream in QEMU v5.0) which is not built in Red Hat Enterprise Linux 6 and 7.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Weaknesses (1)

CWE-273

References (7)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner redhat
Published Aug 29, 2022
Updated Aug 2, 2024
Reserved Jan 25, 2022
Link CVE-2022-0358

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-0358

Red Hat

Severity Moderate
Public date Jan 25, 2022
Bugzilla 2044863
Link CVE-2022-0358

ENISA EUVD

Assigner redhat
Published Aug 29, 2022
Updated Aug 2, 2024
Link EUVD-2022-15514

GitHub

No data