ZeroHour

CVE-2020-35517

PoC ×2
CVSS 3.1
8.2 high
EPSS
<1%p43
Published
()
Modified
Description

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.

Vendors
qemu
Products
qemu
Weakness
CWE-269
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.