CVE-2018-16867
High
Description
A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lead do DoS scenario OR possibly lead to code execution on the host.
SeverityHigh
CVSS7.8
Exploit probability37. percentile0.4%
Product
Qemu
PublishedDec 12, 2018
First seenDec 12, 2018
Weakness typeCWE-362Race condition
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qemu qemu | v ≤ 3.0.0, 3.1.0 | — |
| fedoraproject fedora | 29 | — |
| canonical ubuntu_linux | 14.04, 16.04, 18.04, 18.10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.