Bugzilla – Bug 1212968
VUL-0: CVE-2023-2861: qemu,kvm: 9pfs: improper access control on special files
Last modified: 2024-07-09 11:40:08 UTC
CVE-2023-2861 The 9p protocol does not specifically define how server shall behave when client tries to open a special file, however from security POV it does make sense for 9p server to prohibit opening any special file on host side in general. A sane Linux 9p client for instance would never attempt to open a special file on host side, it would always handle those exclusively on its guest side. A malicious client however could potentially escape from the exported 9p tree by creating and opening a device file on host side. https://gitlab.com/qemu-project/qemu/-/commit/f6b0de53fb87ddefed348a39284c8e2f28dc4eda References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-2861 https://bugzilla.redhat.com/show_bug.cgi?id=2219266
SUSE-SU-2023:3015-1: An update that solves three vulnerabilities can now be installed. Category: security (important) Bug References: 1198037, 1207205, 1212968 CVE References: CVE-2021-4207, CVE-2023-0330, CVE-2023-2861 Sources used: SUSE Linux Enterprise High Performance Computing 12 SP5 (src): qemu-3.1.1.1-69.1 SUSE Linux Enterprise Server 12 SP5 (src): qemu-3.1.1.1-69.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5 (src): qemu-3.1.1.1-69.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:3082-1: An update that solves four vulnerabilities and has two fixes can now be installed. Category: security (important) Bug References: 1179993, 1181740, 1207205, 1212968, 1213001, 1213414 CVE References: CVE-2023-0330, CVE-2023-2861, CVE-2023-3255, CVE-2023-3301 Sources used: Server Applications Module 15-SP5 (src): qemu-7.1.0-150500.49.6.1 openSUSE Leap 15.5 (src): qemu-linux-user-7.1.0-150500.49.6.1, qemu-7.1.0-150500.49.6.1 Basesystem Module 15-SP5 (src): qemu-7.1.0-150500.49.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:3234-1: An update that solves three vulnerabilities can now be installed. Category: security (important) Bug References: 1212968, 1213001, 1213414 CVE References: CVE-2023-2861, CVE-2023-3255, CVE-2023-3301 Sources used: openSUSE Leap 15.4 (src): qemu-linux-user-6.2.0-150400.37.20.1, qemu-6.2.0-150400.37.20.1 openSUSE Leap Micro 5.3 (src): qemu-6.2.0-150400.37.20.1 openSUSE Leap Micro 5.4 (src): qemu-6.2.0-150400.37.20.1 SUSE Linux Enterprise Micro for Rancher 5.3 (src): qemu-6.2.0-150400.37.20.1 SUSE Linux Enterprise Micro 5.3 (src): qemu-6.2.0-150400.37.20.1 SUSE Linux Enterprise Micro for Rancher 5.4 (src): qemu-6.2.0-150400.37.20.1 SUSE Linux Enterprise Micro 5.4 (src): qemu-6.2.0-150400.37.20.1 Basesystem Module 15-SP4 (src): qemu-6.2.0-150400.37.20.1 Server Applications Module 15-SP4 (src): qemu-6.2.0-150400.37.20.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
assigning to ZhangLi to take care of: - SUSE:SLE-12-SP4:Update/qemu - SUSE:SLE-15-SP1:Update/qemu - SUSE:SLE-15-SP2:Update/qemu - SUSE:SLE-15-SP3:Update/qemu
This is an autogenerated message for OBS integration: This bug (1212968) was mentioned in https://build.opensuse.org/request/show/1110620 Factory / qemu
(In reply to Claudio Fontana from comment #12) > assigning to ZhangLi to take care of: > > - SUSE:SLE-12-SP4:Update/qemu > - SUSE:SLE-15-SP1:Update/qemu > - SUSE:SLE-15-SP2:Update/qemu > - SUSE:SLE-15-SP3:Update/qemu I have backported to these versions. - SUSE:SLE-15-SP1:Update/qemu - SUSE:SLE-15-SP2:Update/qemu - SUSE:SLE-15-SP3:Update/qemu SLE12-SP4 was maintained as LTSS(30 Jun 2023). I think it's been out of date, I didn't backport this version.
SUSE-SU-2023:3721-1: An update that solves 10 vulnerabilities and has one security fix can now be installed. Category: security (important) Bug References: 1172382, 1188609, 1190011, 1193880, 1197653, 1198712, 1207205, 1212850, 1212968, 1213925, 1215311 CVE References: CVE-2020-13754, CVE-2021-3638, CVE-2021-3750, CVE-2021-3929, CVE-2022-1050, CVE-2022-26354, CVE-2023-0330, CVE-2023-2861, CVE-2023-3180, CVE-2023-3354 Sources used: openSUSE Leap 15.4 (src): qemu-4.2.1-150200.79.1 SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src): qemu-4.2.1-150200.79.1 SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src): qemu-4.2.1-150200.79.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src): qemu-4.2.1-150200.79.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:3800-1: An update that solves nine vulnerabilities and has one security fix can now be installed. Category: security (important) Bug References: 1172382, 1190011, 1193880, 1197653, 1198712, 1207205, 1212850, 1212968, 1213925, 1215311 CVE References: CVE-2019-13754, CVE-2021-3750, CVE-2021-3929, CVE-2022-1050, CVE-2022-26354, CVE-2023-0330, CVE-2023-2861, CVE-2023-3180, CVE-2023-3354 Sources used: SUSE CaaS Platform 4.0 (src): qemu-3.1.1.1-150100.80.51.5 SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (src): qemu-3.1.1.1-150100.80.51.5 SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (src): qemu-3.1.1.1-150100.80.51.5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 (src): qemu-3.1.1.1-150100.80.51.5 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:3082-2: An update that solves four vulnerabilities and has two security fixes can now be installed. Category: security (important) Bug References: 1179993, 1181740, 1207205, 1212968, 1213001, 1213414 CVE References: CVE-2023-0330, CVE-2023-2861, CVE-2023-3255, CVE-2023-3301 Sources used: SUSE Linux Enterprise Micro 5.5 (src): qemu-7.1.0-150500.49.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.