The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | May 21, 2013 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-guest-agent-win32Upgrade qemu-img | Dec 1, 2016 | May 21, 2013 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-guest-agent-win32Upgrade qemu-img | Oct 16, 2024 | May 21, 2013 |
| Suse | — | Upgrade xen-kmp-desktopUpgrade xen-tools-domUUpgrade xen-libsUpgrade qemuUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade xen-develUpgrade kvmUpgrade qemu-linux-userUpgrade xen-doc-pdfUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade sle-sdk-release | Dec 12, 2013 | May 21, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub