NVD

Id
38056  
Name
CVE-2013-1922  
Description
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-05-13  
Modified Date
2013-11-30  
Seq
2013-1922  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194466 38056 CVE-2013-1922 FEDORA-2013-6185  View
194467 38056 CVE-2013-1922 FEDORA-2013-6221  View
194468 38056 CVE-2013-1922 FEDORA-2013-6211  View
194469 38056 CVE-2013-1922 GLSA-201309-24  View
194470 38056 CVE-2013-1922 [oss-security] 20130415 Xen Security Advisory 48 (CVE-2013-1922) - qemu-nbd format-guessing due to missing format specification  View
194471 38056 CVE-2013-1922 [oss-security] 20130416 CVE-2013-1922 -- qemu: qemu-nbd block format auto-detection vulnerability  View
194472 38056 CVE-2013-1922 1028426  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21071 JVNDB-2013-002646 Xen で使用される QEMU の qemu-nbd における任意のファイルを読まれる脆弱性 Xen で使用される QEMU の qemu-nbd は、ヘッダに基づいて raw ディスクイメージのフォーマットを決定するため、ホスト上の任意のファイルを読まれる脆弱性が存在します。 CVE-2013-1922 61864 CVE-2013-1922 38056 3.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002646.html 2013-04-15 2013-12-05 View