CVE-2013-2231 — qemu: qemu-ga win32 service unquoted search path

Back Back to CVE browser

HIGH

qemu: qemu-ga win32 service unquoted search path

Published Oct 1, 2013

7.2

HIGH

CVSS 2.0

EPSS 0.45%

Description

Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.

Affected products

Red Hat Enterprise Linux 6

qemu-kvm-2:0.12.1.2-2.355.el6_4.6

Fixed · RHSA-2013:1100
Supplementary for Red Hat Enterprise Linux 6

virtio-win-0:1.6.5-6.el6_4

Fixed · RHSA-2013:1101
Red Hat Enterprise Linux 5

kvm

Not affected
Red Hat Enterprise Linux 5

virtio-win

Not affected
Red Hat Enterprise Linux 5

xen

Not affected
Red Hat Enterprise Linux 7

qemu-kvm

Not affected
Red Hat OpenStack Platform 3

qemu-kvm-rhev

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	qemu-kvm-2:0.12.1.2-2.355.el6_4.6	Fixed	RHSA-2013:1100
Supplementary for Red Hat Enterprise Linux 6	virtio-win-0:1.6.5-6.el6_4	Fixed	RHSA-2013:1101
Red Hat Enterprise Linux 5	kvm	Not affected	n/a
Red Hat Enterprise Linux 5	virtio-win	Not affected	n/a
Red Hat Enterprise Linux 5	xen	Not affected	n/a
Red Hat Enterprise Linux 7	qemu-kvm	Not affected	n/a
Red Hat OpenStack Platform 3	qemu-kvm-rhev	Not affected	n/a

Remediation

Red Hat statement

This issue does not affect the kvm package as shipped with Red Hat Enterprise Linux 5. This issue does not affect the xen package as shipped with Red Hat Enterprise Linux 5. This issue does affect the qemu-kvm package as shipped with Red Hat Enterprise Linux 6. Future qemu-kvm updates in Red Hat Enterprise Linux 6 may address this flaw.

Metrics

0.45% 0.00448

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00448

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.45% (0.00448)	36.63th	v5 (v2026.06.15)
Jun 15, 2026	0.45% (0.00448)	35.45th	v5 (v2026.06.15)
Mar 17, 2025	0.05% (0.00054)	14.21th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00890)	30.33th	v2 (v2022.01.01)
Feb 13, 2023	0.89% (0.00890)	29.93th	v2 (v2022.01.01)
Feb 3, 2023	1.03% (0.01034)	40.96th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00890)	28.64th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00890)	26.62th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00890)	12.04th	v2 (v2022.01.01)

Weaknesses (2)

CWE-399

CWE-428

References (6)

http://rhn.redhat.com/errata/RHSA-2013-1100.html
vendor-advisoryx_refsource_REDHATVendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1101.html
vendor-advisoryx_refsource_REDHATVendor Advisory
https://access.redhat.com/security/cve/CVE-2013-2231
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=980757
x_refsource_MISCIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2013-2231
https://www.cve.org/CVERecord?id=CVE-2013-2231

Link	Providers	Tags
http://rhn.redhat.com/errata/RHSA-2013-1100.html		vendor-advisoryx_refsource_REDHATVendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1101.html		vendor-advisoryx_refsource_REDHATVendor Advisory
https://access.redhat.com/security/cve/CVE-2013-2231		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=980757		x_refsource_MISCIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2013-2231
https://www.cve.org/CVERecord?id=CVE-2013-2231