CVE-2016-9379

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete…

published January 23, 2017

CVSS
—
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00437 · 36.7th percentile
Published
2017-01-23T21:00Z
EPSS history
Timeline
  • 23 JAN 21:00Z
    The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete…
    cvelistv5