Descriptionqemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
NVD CVSS v2 Base Score: 3.3 (AV:L/AC:M/Au:N/C:P/I:P/A:N)
Novell/SUSE informationNovell Bugzilla entry: 814059 SUSE Security Advisories:
- openSUSE-SU-2013:1404-1, published Wed, 4 Sep 2013 15:04:10 +0200 (CEST)
List of products where fixes are in QASLE 11 SP3 DEBUGINFO
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP3