VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-16867

CVE-2018-16867

Description

A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lead do DoS scenario OR possibly lead to code execution on the host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • QEMU/Qemullm-fuzzy7 versions
    <3.1.0+ 6 more
    • (no CPE)range: <3.1.0
    • (no CPE)range: 3.1.0
    • cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*range: <=3.0.0
    • cpe:2.3:a:qemu:qemu:3.1.0:rc0:*:*:*:*:*:*
    • cpe:2.3:a:qemu:qemu:3.1.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:qemu:qemu:3.1.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:qemu:qemu:3.1.0:rc3:*:*:*:*:*:*
  • Fedoraproject/Fedora
    cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.