CVE-2018-16867: Path Traversal
A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usbmtpwritedata function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lead do DoS scenario OR possibly lead to code execution on the host.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16867?
CVE-2018-16867 has been classified as a high severity vulnerability due to its potential for arbitrary file read/write access.
How do I fix CVE-2018-16867?
To fix CVE-2018-16867, upgrade your QEMU installation to version 3.1.0 or later.
Which versions of QEMU are affected by CVE-2018-16867?
CVE-2018-16867 affects all QEMU versions prior to 3.1.0.
What type of vulnerability is CVE-2018-16867?
CVE-2018-16867 is a path traversal vulnerability in the Media Transfer Protocol component of QEMU.
Can CVE-2018-16867 be exploited remotely?
Yes, CVE-2018-16867 can be exploited remotely when the guest device is mounted in read-write mode.