CVE ID:	CVE-2016-7116
Description:	Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2016.619   1.3.6.1.4.1.25623.1.0.891599   1.3.6.1.4.1.25623.1.1.1.2.2016.618
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7116 92680 http://www.securityfocus.com/bid/92680 GLSA-201609-01 https://security.gentoo.org/glsa/201609-01 [debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html [oss-security] 20160830 CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend http://www.openwall.com/lists/oss-security/2016/08/30/1 [oss-security] 20160830 Re: CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend http://www.openwall.com/lists/oss-security/2016/08/30/3 [qemu-devel] 20160826 [PATCH v2 0/5] 9P security fixes https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03917.html [qemu-devel] 20160830 [PATCH v4 0/3] 9pfs security fixes https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04231.html http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=56f101ecce0eafd09e2daf1c4eeb1377d6959261 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=56f101ecce0eafd09e2daf1c4eeb1377d6959261