CVE-2013-2231
Fixed in a distro release EPSS <1%
Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.
Products: redhat enterprise_linux, redhat enterprise_linux_desktop_supplementary, redhat enterprise_linux_server_supplementary, redhat enterprise_linux_workstation_supplementary
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | qemu-guest-agent | 2:0.12.1.2-2.355.el6_4.6 |
| Red Hat Enterprise Linux 6 | qemu-guest-agent-win32 | 2:0.12.1.2-2.355.el6_4.6 |
| Red Hat Enterprise Linux 6 | qemu-img | 2:0.12.1.2-2.355.el6_4.6 |
| Red Hat Enterprise Linux 6 | qemu-kvm | 2:0.12.1.2-2.355.el6_4.6 |
| Red Hat Enterprise Linux 6 | qemu-kvm-debuginfo | 2:0.12.1.2-2.355.el6_4.6 |
| Red Hat Enterprise Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.355.el6_4.6 |
| Red Hat rhel extras 6 | virtio-win | 0:1.6.5-6.el6_4 |