CVE-2020-35517

2021-01-2819:13:54

CWE-269

redhat

www.cve.org

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.

CNA Affected

[
  {
    "product": "qemu",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "qemu 5.2.0"
      }
    ]
  }
]