Wind River Support Network

HomeDefectsLIN8-9128
Fixed

LIN8-9128 : Security Advisory - qemu - CVE-2016-9602

Created: May 2, 2018    Updated: Dec 3, 2018
Resolved Date: Sep 13, 2018
Found In Version: 8.0.0.25
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

https://nvd.nist.gov/vuln/detail/CVE-2016-9602

Other Downloads


CVEs


Live chat
Online