CVE-2016-9380

State: Published
Severity: Not scored
Published: Jan 23, 2017
Updated: Aug 6, 2024
Reserved: Nov 17, 2016

Description

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://xenbits.xen.org/xsa/xsa198.patch
94473vdb-entry
GLSA-201612-56vendor-advisory
http://xenbits.xen.org/xsa/advisory-198.html
1037347vdb-entry
https://support.citrix.com/article/CTX218775

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.