CVE-2016-7116 — Path Traversal in Qemu

CWE-22 — Path Traversal11 documents8 sources
Severity
6.0MEDIUMNVD
OSV5.5
EPSS
0.9%
top 24.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
QemuDebian QemuDebian Linux
Timeline
PublishedDec 10
Latest updateMay 13

Description

Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:NExploitability: 1.5 | Impact: 4.0

Affected Packages4 packages

▶debiandebian/qemu< qemu 1:2.6+dfsg-3.1 (bookworm)
▶Debianqemu/qemu< 1:2.6+dfsg-3.1+3
▶Ubuntuqemu/qemu< 2.0.0+dfsg-2ubuntu1.30+1
▶NVDqemu/qemu2.6.2+1

Also affects: Debian Linux 8.0

🔴Vulnerability Details

3
GHSA
GHSA-x8xq-jr3x-4wjr: Directory traversal vulnerability in hw/9pfs/9p↗2022-05-13
▶
OSV
CVE-2016-7116: Directory traversal vulnerability in hw/9pfs/9p↗2016-12-10
▶
OSV
qemu, qemu-kvm vulnerabilities↗2016-11-09
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2016-11-09
▶
Red Hat
Qemu: 9p: directory traversal flaw in 9p virtio backend↗2016-08-11
▶
Debian
CVE-2016-7116: qemu - Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) a...↗2016
▶

💬Community

4
HackerOne
Multiple issues in Libxml2 (2.9.2 - 2.9.5)↗2019-10-14
▶
Bugzilla
CVE-2016-7116 xen: qemu-kvm: Directory traversal flaw in 9p virtio backend [fedora-all]↗2016-08-30
▶
Bugzilla
CVE-2016-7116 qemu: qemu-kvm: Directory traversal flaw in 9p virtio backend [fedora-all]↗2016-08-30
▶
Bugzilla
CVE-2016-7116 Qemu: 9p: directory traversal flaw in 9p virtio backend↗2016-06-14
▶