CVE-2023-1386

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
redhatCNA
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 1%
VendorProductVersion
qemuqemu
*
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bullseye
postponed
bookworm
postponed
buster
no-dsa
bullseye (security)
vulnerable
trixie
vulnerable
sid
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
oracular
deferred
noble
deferred
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
deferred
focal
deferred
bionic
deferred
xenial
deferred
trusty
ignored
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2023-1386
https://bugzilla.redhat.com/show_bug.cgi?id=2223985
https://github.com/advisories/GHSA-ppj8-867g-rgjr
https://github.com/v9fs/linux/issues/29
https://security.netapp.com/advisory/ntap-20230831-0005/
https://access.redhat.com/security/cve/CVE-2023-1386
https://bugzilla.redhat.com/show_bug.cgi?id=2223985
https://github.com/advisories/GHSA-ppj8-867g-rgjr
https://github.com/v9fs/linux/issues/29
https://security.netapp.com/advisory/ntap-20230831-0005/