CVE-2013-2231: High severity red hat enterprise linux vulnerability
An unquoted search path flaw was found in the way qemu guest agent service for Windows was installed into the system.
A local unprivileged user could use this flaw to increase their privileges.
References:
http://cwe.mitre.org/data/definitions/428.html
Acknowledgements:
This issue was discovered by Lev Veyde of Red Hat.
Other sources
Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2231?
CVE-2013-2231 is considered a medium severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2013-2231?
To fix CVE-2013-2231, ensure that the qemu guest agent service for Windows is installed with a properly quoted path.
Who is affected by CVE-2013-2231?
CVE-2013-2231 affects users of Red Hat Enterprise Linux versions 6.0 and 6.4, as well as their desktop and workstation supplementary releases.
Can local users exploit CVE-2013-2231?
Yes, a local unprivileged user can exploit CVE-2013-2231 to increase their privileges on affected systems.
Is CVE-2013-2231 relevant for Microsoft Windows systems?
CVE-2013-2231 is not relevant for Microsoft Windows systems, as it specifically pertains to the qemu guest agent service on Linux.