Vulnerabilities (CVE)

Filtered by vendor Novell Subscribe
Filtered by product Open Desktop Server
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-2016 3 Debian, Novell, Qemu 4 Debian Linux, Open Desktop Server, Open Enterprise Server and 1 more 2023-12-10 6.9 MEDIUM 7.8 HIGH
A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus increase their privileges on the host.