Unscored severity · published May 21, 2013
CVE-2013-2007
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QE
Qemu · Qemu
1.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2007
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2007
git.qemu.org
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html
osvdb.org
http://osvdb.org/93032
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0791.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0896.html
Vendor Advisory
http://secunia.com/advisories/53325
More from Qemu
10.0
CVE-2022-36648
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially…
10.0
CVE-2017-16845
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access
10.0
CVE-2015-8556
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1
9.9
CVE-2016-9603
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update…
9.9
CVE-2017-2620
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue