CVE-2018-16872: Medium severity Qemu Qemu vulnerability
A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usbmtpgetobject and usbmtpgetpartialobject and directories in usbmtpobjectreaddir doesn't consider that the underlying filesystem may have changed since the time lstat(2) was called in usbmtpobjectalloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16872?
CVE-2018-16872 is classified as a medium severity vulnerability.
How do I fix CVE-2018-16872?
To fix CVE-2018-16872, upgrade to the patched version of QEMU as specified in your distribution's security advisories.
Which software is affected by CVE-2018-16872?
CVE-2018-16872 affects multiple versions of QEMU running on various Linux distributions including Debian and Fedora.
What type of vulnerability is CVE-2018-16872?
CVE-2018-16872 is a flaw related to file handling in the Media Transfer Protocol implementation of QEMU.
Can CVE-2018-16872 lead to data loss?
Yes, CVE-2018-16872 may potentially lead to data loss due to improper file handling.