https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:18:01 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:0886 <p><strong>Affected:</strong> AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: libvirt-dbus, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: qemu-guest-agent, AlmaLinux:8: qemu-img, AlmaLinux:8: qemu-kvm and 9 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 (CVE-2022-0358)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: libvirt-dbus, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: qemu-guest-agent, AlmaLinux:8: qemu-img, AlmaLinux:8: qemu-kvm and 9 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 (CVE-2022-0358)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:0886 https://cve.radiocsirt.org/vuln/bdu:2022-01465 bdu:2022-01465 https://cve.radiocsirt.org/vuln/bdu:2022-01465 https://cve.radiocsirt.org/vuln/cnvd-2022-84163 cnvd-2022-84163 https://cve.radiocsirt.org/vuln/cnvd-2022-84163 https://cve.radiocsirt.org/vuln/euvd-2026-10953 EUVD-2026-10953 https://cve.radiocsirt.org/vuln/euvd-2026-10953 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0358 <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.</p> <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0358 https://cve.radiocsirt.org/vuln/ghsa-mv2v-9q68-4c8h <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.</p> <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.</p> https://cve.radiocsirt.org/vuln/ghsa-mv2v-9q68-4c8h https://cve.radiocsirt.org/vuln/gsd-2022-0358 gsd-2022-0358 https://cve.radiocsirt.org/vuln/gsd-2022-0358 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0358 msrc_CVE-2022-0358 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0358 https://cve.radiocsirt.org/vuln/oesa-2022-1772 <p><strong>Affected:</strong> openEuler:22.03-LTS: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.(CVE-2021-4158)</p> <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This issue allows a malicious user to trigger CVE-2018-13405 to obtain sensitive information or potentially escalate their privileges on the system.(CVE-2022-0358)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.(CVE-2021-4158)</p> <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This issue allows a malicious user to trigger CVE-2018-13405 to obtain sensitive information or potentially escalate their privileges on the system.(CVE-2022-0358)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1772 https://cve.radiocsirt.org/vuln/rhsa-2022:0759 <p>QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405</p> <p>QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0759 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0358 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qemu</p> <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qemu</p> <p>A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0358 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0421 <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um seine Privilegien zu erhöhen und vertrauliche Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um seine Privilegien zu erhöhen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0421