CVE-2016-9380 PUBLISHED

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.

EPSS 0.09% · 26.0th percentile

Risk Scores

EPSS Score
0.09%
26.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSxen4.4.2-0ubuntu0.14.04.7, 4.4.2-0ubuntu0.14.04.2, 4.4.2-0ubuntu0.14.04.3
Ubuntu:16.04:LTSxen4.5.1-0ubuntu1, 4.5.1-0ubuntu2, 4.6.0-1ubuntu1

Timeline

References

Open in Interactive Console →