NVD

Id
44373  
Name
CVE-2012-2652  
Description
The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-07  
Modified Date
2014-03-05  
Seq
2012-2652  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222558 44373 CVE-2012-2652 http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=eba25057b9a5e19d10ace2bc7716667a31297169  View
222559 44373 CVE-2012-2652 http://git.qemu.org/?p=qemu-stable-0.15.git;a=log  View
222560 44373 CVE-2012-2652 SUSE-SU-2012:1202  View
222561 44373 CVE-2012-2652 DSA-2545  View
222562 44373 CVE-2012-2652 53725  View
222563 44373 CVE-2012-2652 USN-1522-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27790 JVNDB-2012-003497 Qemu の bdrv_open 関数における任意のファイルを上書きされる脆弱性 Qemu の bdrv_open 関数は、スナップショットのノードに、mkstemp 関数のエラーを適切に処理しないため、任意のファイルを上書きされる、または読まれる脆弱性が存在します。 CVE-2012-2652 55890 CVE-2012-2652 44373 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003497.html 2012-08-07 2012-12-26 View