Lucene search
Veracode Vulnerability DatabaseVERACODE:35250HistoryApr 26, 2022 - 4:59 a.m.
Privilege Escalation
2022-04-2604:59:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
qemu
privilege escalation
validation of authorization
virtio-fs
unintended group ownership
sgid
writable directory
EPSS
0
Percentile
5.1%
qemu is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization which allows an attacker to create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group.
Related
cbl_mariner
cbl_mariner
CVE-2022-0358 affecting package qemu-kvm 4.2.0-41
2023-01-12 20:55:00
CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5
2022-07-22 17:03:06
CVE-2022-0358 affecting package qemu for versions less than 6.2.0-18
2024-03-19 17:21:46
redos
redos
ROS-20220324-02
2022-03-24 00:00:00
oraclelinux
oraclelinux
virt:ol and virt-devel:rhel security update
2022-03-16 00:00:00
cnvd
cnvd
QEMU Elevation of Privilege Vulnerability (CNVD-2022-84163)
2022-01-27 00:00:00
redhat
redhat
osv
osv
Moderate: virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
CVE-2022-0358
2022-08-29 15:15:09
Moderate: virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
fedora
fedora
[SECURITY] Fedora 34 Update: qemu-5.2.0-9.fc34
2022-02-25 17:03:11
[SECURITY] Fedora 35 Update: qemu-6.1.0-14.fc35
2022-02-15 01:38:50
redhatcve
redhatcve
CVE-2022-0358
2022-01-25 17:37:08
cvelist
cvelist
CVE-2022-0358
2022-08-29 00:00:00
prion
prion
Design/Logic Flaw
2022-08-29 15:15:00
almalinux
almalinux
Moderate: virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
nessus
nessus
RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2022:0886)
2022-03-15 00:00:00
RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2022:0759)
2022-03-07 00:00:00
CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:0886)
2022-03-15 00:00:00
openvas
openvas
Fedora: Security Advisory for qemu (FEDORA-2022-5d0676b098)
2022-02-26 00:00:00
Fedora: Security Advisory for qemu (FEDORA-2022-3a60c34473)
2022-02-15 00:00:00
openSUSE: Security Advisory for qemu (openSUSE-SU-2022:0930-1)
2022-03-23 00:00:00
suse
suse
Security update for qemu (important)
2022-03-22 00:00:00
rocky
rocky
virt:rhel and virt-devel:rhel security update
2022-03-15 09:10:17
nvd
nvd
CVE-2022-0358
2022-08-29 15:15:09
ubuntucve
ubuntucve
CVE-2022-0358
2022-01-28 00:00:00
debiancve
debiancve
CVE-2022-0358
2022-08-29 15:15:09
cve
cve
CVE-2022-0358
2022-08-29 15:15:09
debian
debian
[SECURITY] [DSA 5133-1] qemu security update
2022-05-09 20:44:24
ubuntu
ubuntu
QEMU vulnerabilities
2022-06-21 00:00:00
QEMU vulnerabilities
2022-02-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package qemu version 6.1.1-alt1
2022-03-01 00:00:00
gentoo
gentoo
QEMU: Multiple Vulnerabilities
2022-08-14 00:00:00