Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0664

Опубликовано: 29 мар. 2023
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 8.0.0 (исключая)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

EPSS

Процентиль: 2%
0.00016
Низкий

7.8 High

CVSS3

Дефекты

CWE-250
CWE-269
CWE-269

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 2 лет назад

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

CVSS3: 7.8
redhat
больше 2 лет назад

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

CVSS3: 7.8
debian
около 2 лет назад

A flaw was found in the QEMU Guest Agent service for Windows. A local ...

CVSS3: 7.8
github
около 2 лет назад

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

CVSS3: 7.8
fstec
больше 2 лет назад

Уязвимость службы Guest Agent Service эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю повысить свои привилегии в системе

EPSS

Процентиль: 2%
0.00016
Низкий

7.8 High

CVSS3

Дефекты

CWE-250
CWE-269
CWE-269