CVE-2012-2652

The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite…

published August 7, 2012

CVSS
—
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.5th percentile
Published
2012-08-07T20:00Z
EPSS history
Timeline
  • 07 AUG 20:00Z
    The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite…
    cvelistv5