CVE-2016-9380

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete…

published January 23, 2017

CVSS
—
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Published
2017-01-23T21:00Z
EPSS history
Timeline
  • 23 JAN 21:00Z
    The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete…
    cvelistv5