CVE-2013-1922

published 2013-05-13

CVE-2013-1922: qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read…

Priority P4 13 low 3.3 CVSS 2.0

AV L AC M Au N C P I P A N

qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	qemu	< qemu 1.5.0+dfsg-1 (bookworm)	qemu 1.5.0+dfsg-1 (bookworm)
debian	xen	< qemu 1.5.0+dfsg-1 (bookworm)	qemu 1.5.0+dfsg-1 (bookworm)
qemu	qemu	>= 0 < 1.5.0+dfsg-1	1.5.0+dfsg-1
qemu	qemu	>= 0 < 1.5.0+dfsg-1	1.5.0+dfsg-1
qemu	qemu	>= 0 < 1.5.0+dfsg-1	1.5.0+dfsg-1
qemu	qemu	>= 0 < 1.5.0+dfsg-1	1.5.0+dfsg-1
xen	xen	—	—
xen	xen	—	—
xen	xen	—	—

CVSS provenance

nvd v2.0 3.3 LOW AV:L/AC:M/Au:N/C:P/I:P/A:N

osv 4.9 MEDIUM

vendor_debian 4.9 LOW

vendor_redhat 4.9 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.