Test ID:	1.3.6.1.4.1.25623.1.1.1.2.2017.965
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-965-1)
Summary:	The remote host is missing an update for the Debian 'qemu-kvm' package(s) announced via the DLA-965-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'qemu-kvm' package(s) announced via the DLA-965-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests based on the Quick Emulator(Qemu). CVE-2016-9602 Quick Emulator(Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper link following issue. It could occur while accessing symbolic link files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host. CVE-2017-7377 Quick Emulator(Qemu) built with the virtio-9p back-end support is vulnerable to a memory leakage issue. It could occur while doing a I/O operation via v9fs_create/v9fs_lcreate routine. A privileged user/process inside guest could use this flaw to leak host memory resulting in Dos. CVE-2017-7471 Quick Emulator(Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host. CVE-2017-7493 Quick Emulator(Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest. CVE-2017-8086 Quick Emulator(Qemu) built with the virtio-9p back-end support is vulnerable to a memory leakage issue. It could occur while querying file system extended attributes via 9pfs_list_xattr() routine. A privileged user/process inside guest could use this flaw to leak host memory resulting in Dos. For Debian 7 Wheezy, these problems have been fixed in version 1.1.2+dfsg-6+deb7u22. We recommend that you upgrade your qemu-kvm packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'qemu-kvm' package(s) on Debian 7. Solution: Please install the updated package(s). CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9602 BugTraq ID: 95461 http://www.securityfocus.com/bid/95461 https://security.gentoo.org/glsa/201704-01 https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html http://www.openwall.com/lists/oss-security/2017/01/17/12 https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06225.html https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html http://www.securitytracker.com/id/1037604 Common Vulnerability Exposure (CVE) ID: CVE-2017-7377 BugTraq ID: 97319 http://www.securityfocus.com/bid/97319 https://security.gentoo.org/glsa/201706-03 http://www.openwall.com/lists/oss-security/2017/04/03/2 https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html Common Vulnerability Exposure (CVE) ID: CVE-2017-7493 98574 http://www.securityfocus.com/bid/98574 GLSA-201706-03 [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update [oss-security] 20170517 CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode http://seclists.org/oss-sec/2017/q2/278 [qemu-devel] 20170516 [PULL] 9pfs: local: forbid client access to metadata (CVE-2017-7493) https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html https://bugzilla.redhat.com/show_bug.cgi?id=1451709 Common Vulnerability Exposure (CVE) ID: CVE-2017-8086 BugTraq ID: 98012 http://www.securityfocus.com/bid/98012 http://www.openwall.com/lists/oss-security/2017/04/25/5 https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.