Debian/qemu: high 8.8
Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder a
Action: Upgrade qemu to 1:2.8+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.8+dfsg-3 | - |
Fixed versions
| 1:2.8+dfsg-3 |
Sources
published · modified · JSON