Vulnerability in Xen

CVE-2013-1922

qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.

EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.2.0, 4.2.1, 4.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References