What is CVE-2022-0358?

CVE-2022-0358 is a high-severity vulnerability in Qemu, classified under Improper Check for Dropped Privileges. CVSS score: 7.8/10. Published 2022-08-29.

How severe is CVE-2022-0358?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Qemu

CVE-2022-0358

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group…

EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qemu
Redhat Enterprise_linux — versions 8.0
N/a Qemu/virtiofsd — versions Fixed in qemu v6.2.0-7

Weakness classification (CWE)

CWE-273 — Improper Check for Dropped Privileges

References

secalert@redhat.com (Patch, Third Party Advisory, Issue Tracking)
secalert@redhat.com (Patch, Third Party Advisory)
secalert@redhat.com (Third Party Advisory)
secalert@redhat.com (Third Party Advisory)

Frequently asked questions

What is CVE-2022-0358?: CVE-2022-0358 is a high-severity vulnerability in Qemu, classified under Improper Check for Dropped Privileges. CVSS score: 7.8/10. Published 2022-08-29.
How severe is CVE-2022-0358?: High severity. CVSS v3 base score is 7.8 out of 10.