Logo
›
›vulnerability›CVE-2016-9379
Name
CVE-2016-9379
Source
NVD ( link)Debian ( link)
Description
The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.
CWEs
CWE-20
Published Date
Updated Date
Workaround
-
Advisories
http://www.securityfocus.com/bid/94473VDB Entry
http://www.securitytracker.com/id/1037347VDB Entry
http://xenbits.xen.org/xsa/advisory-198.htmlPatch
http://xenbits.xen.org/xsa/xsa198.patchPatch
https://support.citrix.com/article/CTX218775Patch
http://www.securityfocus.com/bid/94473VDB Entry
http://www.securitytracker.com/id/1037347VDB Entry
http://xenbits.xen.org/xsa/advisory-198.htmlPatch
http://xenbits.xen.org/xsa/xsa198.patchPatch
https://support.citrix.com/article/CTX218775Patch

Analysis#

Affected Component
Analysis
xen
Exploitable

Vulnerability Ratings#

7.9
other
4.6
CVSSv2

Others affected component#

Name
Project
Project Version
Version
Status
xen
buildroot
2025.02.x
4.14.6
Exploitable