The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | May 21, 2013 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-guest-agent-win32Upgrade qemu-guest-agent | Dec 1, 2016 | May 21, 2013 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-guest-agent-win32Upgrade qemu-guest-agent | Oct 16, 2024 | May 21, 2013 |
| Suse | — | Upgrade kvmUpgrade xen-kmp-desktopUpgrade qemu-guest-agentUpgrade xen-tools-domUUpgrade xen-develUpgrade qemu-linux-userUpgrade xen-toolsUpgrade xen-libsUpgrade qemu-toolsUpgrade qemuUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade xen-doc-htmlUpgrade sle-sdk-release | Dec 12, 2013 | May 21, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub