Code injection

2019-11-0118:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

JSON

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python’s os.chmod() works when passed a mode of ‘-1’.

CPENameOperatorVersion
ovirt-engineeq3.2

CPE	Name	Operator	Version
	ovirt-engine	eq	3.2

References

access.redhat.com/security/cve/cve-2013-4367

bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4367