CVE-2012-2652: The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite…

PriorityP415medium4.4CVSS 2.0

AVLACMAuNCPIPAP

EPSS

0.34%

26.9th percentile

The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	qemu	< qemu 1.1.0+dfsg-1 (bookworm)	qemu 1.1.0+dfsg-1 (bookworm)
qemu	qemu	—	—
qemu	qemu	>= 0 < 1.1.0+dfsg-1	1.1.0+dfsg-1
qemu	qemu	>= 0 < 1.1.0+dfsg-1	1.1.0+dfsg-1
qemu	qemu	>= 0 < 1.1.0+dfsg-1	1.1.0+dfsg-1
qemu	qemu	>= 0 < 1.1.0+dfsg-1	1.1.0+dfsg-1

CVSS provenance

nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P

osv4.4MEDIUM

vendor_debian4.4MEDIUM

vendor_redhat4.4MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.