CVE-2013-1922
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the...
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
Exploit likelihood
What each source reports
NVD Score used
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
- Record
CVE-2013-1922- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
- Record
CVE-2013-1922- Updated
- 2026-11-02
EUVDEUVD-2013-1916 No score
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
- Record
EUVD-2013-1916- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7fq-6h69-259m No score
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the...
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
- Record
GHSA-v7fq-6h69-259m- Updated
- 2026-11-02
OSV No score
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
- Record
CVE-2013-1922- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1922 No score
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
- Record
DEBIAN-CVE-2013-1922- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score
xen-4.7.0_12-1.3 on GA media
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10196-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1922 is a low vulnerability (CVSS 3.3) in Xen, published May 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in qemu 1.5.0+dfsg-1.
References
lists.fedoraproject.org/pipermail/package-announce/2013-April/103637.html
secunia.com/advisories/55082
security.gentoo.org/glsa/glsa-201309-24.xml
openwall.com/lists/oss-security/2013/04/16/2
Show 129 moreShow less
securitytracker.com/id/1028426
nvd.nist.gov/vuln/detail/CVE-2013-1922
github.com/advisories/GHSA-v7fq-6h69-259m
security-tracker.debian.org/tracker/CVE-2013-1922
suse.com/security/cve/CVE-2011-1898