CVE Catalog
CVE-2017-16638
CriticalSummary
The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the 'qemu' group to gain root privileges by creating a hard link in a directory on which 'chown' is called recursively by the OpenRC service script.
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the net-misc/vde package to version 2.3.2-r4 or later to mitigate this vulnerability.
Original NVD description (English source)
The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by creating a hard link in a directory on which "chown" is called recursively by the OpenRC service script.