NVD

Id
21654  
Name
CVE-2016-7116  
Description
Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-12  
Seq
2016-7116  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
116436 21654 CVE-2016-7116 http://git.qemu.org/?p=qemu.git;a=commit;h=56f101ecce0eafd09e2daf1c4eeb1377d6959261  View
116437 21654 CVE-2016-7116 [oss-security] 20160830 CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend  View
116438 21654 CVE-2016-7116 [oss-security] 20160830 Re: CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend  View
116439 21654 CVE-2016-7116 92680  View
116440 21654 CVE-2016-7116 [qemu-devel] 20160826 [PATCH v2 0/5] 9P security fixes  View
116441 21654 CVE-2016-7116 [qemu-devel] 20160830 [PATCH v4 0/3] 9pfs security fixes  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5370 JVNDB-2016-006143 QEMU の hw/9pfs/9p.c におけるディレクトリトラバーサルの脆弱性 QEMU (別名 Quick Emulator) の hw/9pfs/9p.c には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2016-7116 93623 CVE-2016-7116 21654 2.1 6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006143.html 2016-08-26 2016-12-13 View