CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2022-0358

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

Score
7.8 high
Published
2022-08-29
Links
NVD · cve.org

Affected ports (2)

PortPackageVersionStatusMaintainer
emulators/qemu-cheriqemu-cheri0.d20260108unaddressedbrooks@FreeBSD.org
emulators/qemu-user-staticqemu-user-static3.1.0_16unaddressedemulation@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>qemu-cheri</name>
	<range><lt>6.2.0-7</lt></range>
      </package>
      <package>
	<name>qemu-user-static</name>
	<range><lt>6.2.0-7</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A flaw was found in the QEMU virtio-fs shared file system daemon
	(virtiofsd) implementation. This flaw is strictly related to
	CVE-2018-13405. A local guest user can create files in the directories
	shared by virtio-fs with unintended group ownership in a scenario
	where a directory is SGID to a certain group and is writable by a user
	who is not a member of the group. This could allow a malicious
	unprivileged user inside the guest to gain access to resources
	accessible to the root group, potentially escalating their privileges
	within the guest. A malicious local user in the host might also
	leverage this unexpected executable file created by the guest to
	escalate their privileges on the host system.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2022-0358</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2022-0358</url>
    </references>
    <dates>
      <discovery>2022-08-29</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>