CVE-2016-9379

State: Published
Severity: Not scored
Published: Jan 23, 2017
Updated: Aug 6, 2024
Reserved: Nov 17, 2016

Description

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://xenbits.xen.org/xsa/xsa198.patch
94473vdb-entry
GLSA-201612-56vendor-advisory
http://xenbits.xen.org/xsa/advisory-198.html
1037347vdb-entry
https://support.citrix.com/article/CTX218775

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.