Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9380

Опубликовано: 22 нояб. 2016
Источник: redhat
CVSS3: 8
CVSS2: 4.6

Описание

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1392939xen: delimiter injection vulnerabilities in pygrub (XSA-198)

8 High

CVSS3

4.6 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 9 лет назад

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.

CVSS3: 7.5
nvd
около 9 лет назад

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.

CVSS3: 7.5
debian
около 9 лет назад

The pygrub boot loader emulator in Xen, when nul-delimited output form ...

CVSS3: 7.5
github
больше 3 лет назад

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.

suse-cvrf
около 9 лет назад

Security update for xen

8 High

CVSS3

4.6 Medium

CVSS2