The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | May 21, 2013 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-guest-agent-win32Upgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm | Dec 1, 2016 | May 21, 2013 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-guest-agent-win32Upgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm | Oct 16, 2024 | May 21, 2013 |
| Suse | — | Upgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade sle-sdk-releaseUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade xenUpgrade xen-kmp-defaultUpgrade xen-develUpgrade kvmUpgrade xen-kmp-desktopUpgrade xen-libsUpgrade xen-tools-domUUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-linux-userUpgrade xen-toolsUpgrade qemu-tools | Dec 12, 2013 | May 21, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub