7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
CentOS Errata and Security Advisory CESA-2013:1100
KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component
for running virtual machines using KVM.
An unquoted search path flaw was found in the way the QEMU Guest Agent
service installation was performed on Windows. Depending on the permissions
of the directories in the unquoted search path, a local, unprivileged user
could use this flaw to have a binary of their choosing executed with SYSTEM
privileges. (CVE-2013-2231)
This issue was discovered by Lev Veyde of Red Hat.
All users of qemu-kvm should upgrade to these updated packages, which
contain backported patches to correct this issue. After installing this
update, shut down all running virtual machines. Once all virtual machines
have shut down, start them again for this update to take effect.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-July/082036.html
Affected packages:
qemu-guest-agent
qemu-guest-agent-win32
qemu-img
qemu-kvm
qemu-kvm-tools
Upstream details at:
https://access.redhat.com/errata/RHSA-2013:1100
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 6 | i686 | qemu-guest-agent | < 0.12.1.2-2.355.0.1.el6.centos.6 | qemu-guest-agent-0.12.1.2-2.355.0.1.el6.centos.6.i686.rpm |
CentOS | 6 | x86_64 | qemu-guest-agent | < 0.12.1.2-2.355.0.1.el6.centos.6 | qemu-guest-agent-0.12.1.2-2.355.0.1.el6.centos.6.x86_64.rpm |
CentOS | 6 | x86_64 | qemu-guest-agent-win32 | < 0.12.1.2-2.355.0.1.el6.centos.6 | qemu-guest-agent-win32-0.12.1.2-2.355.0.1.el6.centos.6.x86_64.rpm |
CentOS | 6 | x86_64 | qemu-img | < 0.12.1.2-2.355.0.1.el6.centos.6 | qemu-img-0.12.1.2-2.355.0.1.el6.centos.6.x86_64.rpm |
CentOS | 6 | x86_64 | qemu-kvm | < 0.12.1.2-2.355.0.1.el6.centos.6 | qemu-kvm-0.12.1.2-2.355.0.1.el6.centos.6.x86_64.rpm |
CentOS | 6 | x86_64 | qemu-kvm-tools | < 0.12.1.2-2.355.0.1.el6.centos.6 | qemu-kvm-tools-0.12.1.2-2.355.0.1.el6.centos.6.x86_64.rpm |