VULNERABILITY INTELLIGENCE

CVE-2020-35517

CVSS score8.2 HIGH
EPSS probability0.53%
CISA KEVNot currently listed
Published2021-01-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.

Weakness classification

  • secalert@redhat.com: CWE-269
  • nvd@nist.gov: CWE-269

Primary references