Every CVE Search/ Get API key

CVE-2013-2007

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses...

6.9 MediumFix available

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

Exploit likelihood

0.38%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

Record
CVE-2013-2007
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

Record
CVE-2013-2007
Updated
2026-11-02
EUVDEUVD-2013-1998 No score

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

Record
EUVD-2013-1998
Updated
2026-11-03
GitHub AdvisoriesGHSA-qf79-fpj8-8m3g No score

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses...

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

Record
GHSA-qf79-fpj8-8m3g
Updated
2026-11-02
OSVMGASA-2013-0169 No score

Updated qemu packages fix security vulnerability

It was found that QEMU Guest Agent (the "qemu-ga" service) created certain files with world-writable permissions when run in daemon mode (the default mode). An unprivileged guest user could use this flaw to consume all free space on the partition containing the qemu-ga log file, or modify the contents of the log. When a UNIX domain socket transport was explicitly configured to be used (not the default), an unprivileged guest user could potentially use this flaw to escalate their privileges in the guest (CVE-2013-2007).

Note: This update requires manual action. Refer below for details.

This update does not change the permissions of the existing log file or the UNIX domain socket. For these to be changed, stop the qemu-ga service, and then manually remove all "group" and "other" permissions on the affected files, or remove the files.

Also note that after installing this update, files created by the guest-file-open QEMU Monitor Protocol (QMP) command will still continue to be created with world-writable permissions for backwards compatibility.

Record
MGASA-2013-0169
Updated
2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score

xen-4.7.0_12-1.3 on GA media

These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10196-1
Updated
2026-11-02
OSVSUSE-SU-2015:0943-1 No score

Security update for KVM

This update fixes a file permission issue with qga (the QEMU Guest Agent) from the qemu/kvm package and includes several bug-fixes.

(bnc#818182) (CVE-2013-2007) (bnc#786813) (bnc#725008) (bnc#712137) (bnc#824340)

Security Issues:

* CVE-2013-2007
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2007>
Record
SUSE-SU-2015:0943-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Mageia:2
 before 1.0-6.5.mga2
1.0-6.5.mga2
qemu
Mageia:3
 before 1.2.0-8.1.mga3
1.2.0-8.1.mga3
qemu-guest-agent
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-img
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-tools
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-guest-agent-win32
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-guest-agent
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-img
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
Show 17 moreShow less
Affected packages
PackageAffectedFixed
qemu-kvm
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-tools
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-guest-agent-win32
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-guest-agent
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-img
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-tools
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-guest-agent-win32
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-guest-agent
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-img
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-kvm-tools
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
qemu-guest-agent-win32
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.355.el6_4.5
2:0.12.1.2-2.355.el6_4.5
xen
openSUSE:Tumbleweed
From an advisory covering 124 CVEs
 before 4.7.0_12-1.3
4.7.0_12-1.3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-2007 is a medium vulnerability (CVSS 6.9) in Qemu, published May 21, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in qemu 1.0-6.5.mga2.

References

Show 161 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open