CVE-2018-16867CWE-362

A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0

High · published December 12, 2018

CVSS v3.0
7.0
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lead do DoS scenario OR possibly lead to code execution on the host.

The record
Technical detail
CVSS v3.0
7.0 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.6th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2018-12-12T13:00Z
EPSS history
Timeline
  • 12 DEC 13:00Z
    A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0
    cvelistv5