CVE-2017-7493

Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode

Loading…

Severity

Moderate

Red Hat Product Security

7.1

CVSS 3.0

Review impact separately from score.

Published · May 16, 2017

Updated · May 13, 2026

Description

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 7.1
CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 · 6.5
AV:A/AC:H/Au:S/C:C/I:C/A:C

CWE-284 · Improper Access Control