Lucene search

K
mageiaGentoo FoundationMGASA-2013-0235
HistoryJul 26, 2013 - 3:54 p.m.

Updated qemu package fixes CVE-2013-2231

2013-07-2615:54:55
Gentoo Foundation
advisories.mageia.org
15

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Updated qemu packages fix security vulnerability: An unquoted search path flaw was found in the way the QEMU Guest Agent service installation was performed on Windows. Depending on the permissions of the directories in the unquoted search path, a local, unprivileged user could use this flaw to have a binary of their choosing executed with SYSTEM privileges (CVE-2013-2231).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchqemu< 1.2.0-8.2qemu-1.2.0-8.2.mga3

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%