Log in Start free

Vulnerability · Published Dec 6, 2023 · Assigned by fedora

CVE-2023-2861Qemu: 9pfs: improper access control on special files

Medium 6.0

In plain English

A medium-severity improper access control in qemu. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.0Medium
Exploit odds (30 days)0.4%top 68.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20qemu8.0.2-r1ALPINE-CVE-2023-2861
Alpine:v3.21qemu8.0.2-r1ALPINE-CVE-2023-2861
Alpine:v3.22qemu8.0.2-r1ALPINE-CVE-2023-2861
Alpine:v3.23qemu8.0.2-r1ALPINE-CVE-2023-2861
Alpine:v3.24qemu8.0.2-r1ALPINE-CVE-2023-2861
Debian:12qemu1:7.2+dfsg-7+deb12u1DEBIAN-CVE-2023-2861
Debian:13qemu1:8.0.3+dfsg-1DEBIAN-CVE-2023-2861
Debian:14qemu1:8.0.3+dfsg-1DEBIAN-CVE-2023-2861
Ubuntu:22.04:LTSqemu1:6.2+dfsg-2ubuntu6.16UBUNTU-CVE-2023-2861
Ubuntu:22.04:LTSqemu1:6.2+dfsg-2ubuntu6.16USN-6567-1

Affected products (as reported)

VendorProductVersions
qemu see references

Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

References