The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by creating a hard link in a directory on which "chown" is called recursively by the OpenRC service script.


원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16638