QwikSec

Security Database

CVE

CWE

Training

CVE-2018-16867

Published: Dec 12, 2018

Modified: Aug 5, 2024

PUBLISHED

CVSS v3.0

7.0

HIGH

Description

A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lead do DoS scenario OR possibly lead to code execution on the host.

Vendor	Product	Versions
[UNKNOWN]	QEMU:	affected `3.1.0`

Weaknesses (CWE)

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

High

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16867

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

[oss-security] 20181206 CVE-2018-16867 QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP)

mailing-list

x_refsource_MLIST

FEDORA-2019-88a98ce795

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.