CVE-2023-1386
Global infos:
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.
CVE Status: Modified
References:
Metrics:
| Attribute | Value |
|---|---|
| Attack Complexity | LOW |
| Attack Vector | LOCAL |
| Availability Impact | NONE |
| Base Score | 3.3 |
| Base Severity | LOW |
| Confidentiality Impact | NONE |
| Integrity Impact | LOW |
| Privileges Required | LOW |
| Scope | UNCHANGED |
| User Interaction | NONE |
| Vector String | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
| Exploitability Score | 1.8 |
| Impact Score | 1.4 |
| Source | [email protected] |
| Type | Secondary |