CVE-2017-7493

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.

• CWE-732

• http://seclists.org/oss-sec/2017/q2/278Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/98574Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1451709Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlMailing List, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.htmlMailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201706-03Third Party Advisory
• http://seclists.org/oss-sec/2017/q2/278Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/98574Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1451709Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlMailing List, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.htmlMailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201706-03Third Party Advisory

Published

May 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7487The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux k…7.8
• CVE-2017-7488Authconfig version 6.2.8 is vulnerable to an Information exp…
• CVE-2017-7489In Moodle 2.x and 3.x, remote authenticated users can take o…
• CVE-2017-7490In Moodle 2.x and 3.x, searching of arbitrary blogs is possi…
• CVE-2017-7491In Moodle 2.x and 3.x, a CSRF attack is possible that allows…
• CVE-2017-7492Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-7494Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.1…9.8
• CVE-2017-7495fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 …
• CVE-2017-7496fedora-arm-installer up to and including 1.99.16 is vulnerab…
• CVE-2017-7497The dialog for creating cloud volumes (cinder provider) in C…4.1
• CVE-2017-7498Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-7499Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…