EUVD-2023-1529

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Lima fixes vulnerability allowing access to host files via Linux virtual machines in version 0.16.0

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2023-32684	10 Jan 202517:03	–	circl
CNNVD	Lima 安全漏洞	30 May 202300:00	–	cnnvd
CVE	CVE-2023-32684	30 May 202317:19	–	cve
Cvelist	CVE-2023-32684 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file	30 May 202317:19	–	cvelist
Github Security Blog	In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file	31 May 202323:38	–	github
NVD	CVE-2023-32684	30 May 202318:15	–	nvd
OSV	CVE-2023-32684 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file	30 May 202317:19	–	osv
OSV	GHSA-F7QW-JJ9C-RPQ9 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file	31 May 202323:38	–	osv
OSV	GO-2023-1803 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima	20 Aug 202420:31	–	osv
Prion	Path traversal	30 May 202318:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "8b095799-8244-3232-8052-b366efbde6b5",
        "vendor": {
          "name": "lima-vm"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "60b3e6fb-8ae0-3014-9eab-cd32fa3a68d6",
        "product": {
          "name": "lima"
        },
        "product_version": "< 0.16.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/lima-vm/lima/security/advisories/GHSA-f7qw-jj9c-rpq9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-32684
github	www.github.com/lima-vm/lima/commit/01dbd4d9cabe692afa4517be3995771f0ebb38a5
github	www.github.com/lima-vm/lima
github	www.github.com/lima-vm/lima/releases/tag/v0.16.0

03 Oct 2025 20:07Current

3.9Low risk

Vulners AI Score3.9

CVSS 3.12.5 - 2.7

EPSS0.00185

SSVC

lima vulnerability linux virtual machines file access host filesystem