Lucene search
RedhatCVELIST:CVE-2022-0358HistoryAug 29, 2022 - 12:00 a.m.
CVE-2022-0358
2022-08-2900:00:00
CWE-273
redhat
www.cve.org
1
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.
CNA Affected
[
{
"vendor": "n/a",
"product": "QEMU/virtiofsd",
"versions": [
{
"version": "Fixed in qemu v6.2.0-7",
"status": "affected"
}
]
}
]Related
fedora
fedora
[SECURITY] Fedora 35 Update: qemu-6.1.0-14.fc35
2022-02-15 01:38:50
[SECURITY] Fedora 34 Update: qemu-5.2.0-9.fc34
2022-02-25 17:03:11
nessus
nessus
Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2022-0886)
2022-03-16 00:00:00
RHEL 8 : virt:av and virt-devel:av qemu-kvm (RHSA-2022:0973)
2022-03-22 00:00:00
Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2022:0886)
2023-11-07 00:00:00
rocky
rocky
virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
redhat
redhat
osv
osv
Moderate: virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
CVE-2022-0358
2022-08-29 15:15:09
Moderate: virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
debiancve
debiancve
ubuntucve
ubuntucve
cve
cve
openvas
openvas
Fedora: Security Advisory for qemu (FEDORA-2022-3a60c34473)
2022-02-15 00:00:00
Fedora: Security Advisory for qemu (FEDORA-2022-5d0676b098)
2022-02-26 00:00:00
CentOS Update for kernel CESA-2019:0717 centos6
2019-04-13 00:00:00
almalinux
almalinux
Moderate: virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
prion
prion
Design/Logic Flaw
2022-08-29 15:15:00
Design/Logic Flaw
2018-07-06 14:29:00
Design/Logic Flaw
2022-08-24 16:15:00
redhatcve
redhatcve
cnvd
cnvd
QEMU Elevation of Privilege Vulnerability (CNVD-2022-84163)
2022-01-27 00:00:00
nvd
nvd
centos
centos
kernel, perf, python security update
2019-04-12 13:58:58
bpftool, kernel, perf, python security update
2023-03-08 16:36:50
bpftool, kernel, perf, python security update
2022-08-15 17:35:43
virtuozzo
virtuozzo
oraclelinux
oraclelinux
kernel security and bug fix update
2019-04-11 00:00:00
virt:ol and virt-devel:rhel security update
2022-03-16 00:00:00
Unbreakable Enterprise kernel security update
2018-09-10 00:00:00
f5
f5
K00854051 : Linux kernel vulnerability CVE-2018-13405
2019-05-09 00:00:00
zdt
zdt
veracode
veracode
Privilege Escalation
2019-05-16 03:18:36
Privilege Escalation
2022-04-26 04:59:52
cvelist
cvelist
CVE-2018-13405
2018-07-06 14:00:00
CVE-2021-4037
2022-08-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-0358 affecting package qemu for versions less than 6.2.0-18
2024-03-19 17:21:46
CVE-2022-0358 affecting package qemu-kvm 4.2.0-41
2023-01-12 20:55:00
CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5
2022-07-22 17:03:06
redos
redos
ROS-20220324-02
2022-03-24 00:00:00
debian
debian
[SECURITY] [DSA 4266-1] linux security update
2018-08-06 18:39:46
[SECURITY] [DSA 4266-1] linux security update
2018-08-06 18:39:46
[SECURITY] [DLA 1466-1] linux-4.9 security update
2018-08-15 12:18:26
amazon
amazon
Critical: kernel
2018-08-04 23:48:00
suse
suse
Security update for qemu (important)
2022-03-22 00:00:00
Security update for the Linux Kernel (important)
2018-07-28 15:09:53
Security update for the Linux Kernel (important)
2021-11-11 00:00:00
ibm
ibm
photon
photon
Important Photon OS Security Update - PHSA-2018-0169
2018-07-31 00:00:00
Important Photon OS Security Update - PHSA-2018-0076
2018-07-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package qemu version 6.1.1-alt1
2022-03-01 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2022-06-21 00:00:00
Linux kernel vulnerabilities
2018-08-24 00:00:00
QEMU vulnerabilities
2022-02-28 00:00:00
cloudfoundry
cloudfoundry
USN-3753-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-09-11 00:00:00
mageia
mageia
Updated kernel packages fixes security vulnerabilities
2018-07-25 11:24:17
Updated kernel-linus packages fix security vulnerabilities
2018-08-15 18:45:26