PT-2013-3472 · Xen+1 · Qemu+1

Daniel Berrange · Publicado 2013-05-13 · Atualizado 2024-06-15 · CVE-2013-1922

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions QEMU versions used in Xen 4.2.x

Description The issue allows local guest OS administrators to read arbitrary files on the host by modifying the header of a raw disk image to identify a different format. This is exploited when the guest is restarted.

Recommendations For QEMU versions used in Xen 4.2.x, consider restricting access to the raw disk image functionality to minimize the risk of exploitation until a fix is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1922

OPENSUSE-SU-2024:10196-1

SUSE-SU-2013_1923-1

Produtos afetados

Qemu

Suse

Referências · 166

• https://lists.suse.com/pipermail/sle-security-updates/2013-December/000672.html · Nota
• http://support.novell.com/security/cve/CVE-2013-4553.html · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://bugzilla.novell.com/848657 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• https://suse.com/security/cve/CVE-2012-5513 · Nota
• https://suse.com/security/cve/CVE-2013-3495 · Nota