Lucene search
Veracode Vulnerability DatabaseVERACODE:29317HistoryFeb 10, 2021 - 1:00 a.m.
Privilege Escalation
2021-02-1001:00:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
0.0005 Low
EPSS
Percentile
17.9%
Qemu is vulnerable to privilege escalation attack. A race condition flaw was found in the 9pfs server implementation of QEMU. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.
References
bugzilla.redhat.com/show_bug.cgi?id=1927007
git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2021-20181
lists.debian.org/debian-lts-announce/2021/02/msg00024.html
lists.debian.org/debian-lts-announce/2022/09/msg00008.html
security.netapp.com/advisory/ntap-20210720-0009/
www.zerodayinitiative.com/advisories/ZDI-21-159/
Related
zdi
zdi
nvd
nvd
CVE-2021-20181
2021-05-13 16:15:07
debiancve
debiancve
CVE-2021-20181
2021-05-13 16:15:07
alpinelinux
alpinelinux
CVE-2021-20181
2021-05-13 16:15:07
cbl_mariner
cbl_mariner
CVE-2021-20181 affecting package qemu-kvm 4.2.0-48
2021-07-08 21:56:54
cve
cve
CVE-2021-20181
2021-05-13 16:15:07
cvelist
cvelist
CVE-2021-20181
2021-05-13 15:24:15
redhatcve
redhatcve
CVE-2021-20181
2021-02-09 21:30:29
prion
prion
Race condition
2021-05-13 16:15:00
osv
osv
CVE-2021-20181
2021-05-13 16:15:07
qemu vulnerabilities
2021-02-08 13:12:32
qemu - security update
2021-02-16 00:00:00
ubuntucve
ubuntucve
CVE-2021-20181
2021-02-01 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2023-1289)
2023-01-31 00:00:00
openSUSE: Security Advisory for qemu (openSUSE-SU-2021:0363-1)
2021-04-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0521-1)
2021-06-09 00:00:00
nessus
nessus
EulerOS Virtualization 3.0.2.2 : qemu-kvm (EulerOS-SA-2023-1289)
2023-01-30 00:00:00
SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2021:0521-1)
2021-02-22 00:00:00
openSUSE Security Update : qemu (openSUSE-2021-363)
2021-03-02 00:00:00
suse
suse
Security update for qemu (important)
2021-03-01 00:00:00
oraclelinux
oraclelinux
qemu security update
2021-03-15 00:00:00
qemu security update
2021-03-12 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2021-02-08 00:00:00
debian
debian
[SECURITY] [DLA 2560-1] qemu security update
2021-02-18 16:57:32
[SECURITY] [DLA 3099-1] qemu security update
2022-09-05 03:28:05