Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9379

Опубликовано: 22 нояб. 2016
Источник: redhat
CVSS3: 8
CVSS2: 4.6
EPSS Низкий

Описание

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1392939xen: delimiter injection vulnerabilities in pygrub (XSA-198)

EPSS

Процентиль: 28%
0.00101
Низкий

8 High

CVSS3

4.6 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.9
ubuntu
около 9 лет назад

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.

CVSS3: 7.9
nvd
около 9 лет назад

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.

CVSS3: 7.9
debian
около 9 лет назад

The pygrub boot loader emulator in Xen, when S-expression output forma ...

CVSS3: 7.9
github
больше 3 лет назад

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.

suse-cvrf
около 9 лет назад

Security update for xen

EPSS

Процентиль: 28%
0.00101
Низкий

8 High

CVSS3

4.6 Medium

CVSS2