{"id":"CVE-2013-4419","aliases":["DEBIAN-CVE-2013-4419","EUVD-2013-4296","GHSA-3vxx-8f6w-cpxp","RHSA-2013:1536","UBUNTU-CVE-2013-4419","openSUSE-SU-2024:10032-1"],"status":"published","title":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or -...","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","severity":{"version":"2.0","score":6.8,"vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00754,"percentile":0.55372,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2013-11-05T20:00:00Z","modified":"2026-10-17T12:52:41Z","fixes":[{"ecosystem":"Debian:12","package":"libguestfs","fixed_in":["1:1.22.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libguestfs","fixed_in":["1:1.22.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libguestfs","fixed_in":["1:1.22.7-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-debuginfo","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-javadoc","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ruby-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools-c","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"perl-Sys-Guestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-debuginfo","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-javadoc","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ruby-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools-c","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perl-Sys-Guestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-debuginfo","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-javadoc","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ruby-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools-c","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"perl-Sys-Guestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-debuginfo","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-javadoc","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs-devel","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ruby-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools-c","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perl-Sys-Guestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-libguestfs","fixed_in":["1:1.20.11-2.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.7-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.11-2.el6"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.28.12-1ubuntu2","1:1.28.12-1ubuntu3","1:1.30.6-1ubuntu1","1:1.30.6-1ubuntu2","1:1.32.2-3ubuntu1","1:1.32.2-4ubuntu1","1:1.32.2-4ubuntu2","1:1.32.2-4ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.34.6-7ubuntu1","1:1.36.10-1ubuntu2","1:1.36.10-1ubuntu3","1:1.36.11-1ubuntu1","1:1.36.13-1ubuntu2","1:1.36.13-1ubuntu3","1:1.36.13-1ubuntu3.1","1:1.36.13-1ubuntu3.2","1:1.36.13-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.40.2-2ubuntu6","1:1.40.2-2ubuntu8","1:1.40.2-7ubuntu3","1:1.40.2-7ubuntu4","1:1.40.2-7ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.44.1-1ubuntu6","1:1.44.1-1ubuntu9","1:1.44.1-1ubuntu10","1:1.44.1-1ubuntu11","1:1.46.2-10ubuntu2","1:1.46.2-10ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.50.1-4ubuntu1","1:1.50.1-4ubuntu2","1:1.52.0-2ubuntu1","1:1.52.0-2ubuntu2","1:1.52.0-5ubuntu1","1:1.52.0-5ubuntu2","1:1.52.0-5ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.54.1-1ubuntu3","1:1.54.1-2ubuntu2","1:1.54.1-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.58.1-3ubuntu3","1:1.58.1-5ubuntu2","1:1.58.1-7ubuntu2.2","1:1.58.1-7ubuntu4","1:1.60.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.54.1-2ubuntu3","1:1.54.1-2ubuntu4","1:1.54.1-2ubuntu5","1:1.54.1-2ubuntu6","1:1.54.1-2ubuntu7","1:1.54.1-3ubuntu1","1:1.54.1-3.1ubuntu1","1:1.56.2-4ubuntu2","1:1.56.2-4ubuntu3","1:1.56.2-5ubuntu2","1:1.56.2-6ubuntu1","1:1.58.1-3ubuntu1","1:1.58.1-3ubuntu2","1:1.58.1-3ubuntu3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.4-11.1"}]}],"bundled":2}],"products":[{"vendor":"libguestfs","product":"libguestfs"},{"vendor":"novell","product":"suse_linux_enterprise_server"},{"vendor":"suse","product":"suse_linux_enterprise_software_development_kit"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-1536.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/55813","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.redhat.com/archives/libguestfs/2013-October/msg00031.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1016960","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4419","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3vxx-8f6w-cpxp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4419","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1536","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/libguestfs.html#RHSA-2013-1536","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=908255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=909666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=958183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=971207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=971326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=971664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=972413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=973425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=975377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=975572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=975753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=975760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=980358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=980372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=980502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=983690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=997884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=998108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1000122","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1536.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4419","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2013-4419","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4419","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-4419","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","status":"published","published":"2013-11-05T20:00:00Z","modified":"2024-08-06T16:45:14.194Z","updated_at":"2026-11-02T14:34:58.193873Z"}],"euvd":[{"id":"EUVD-2013-4296","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","status":"published","published":"2013-11-05T20:00:00Z","modified":"2024-08-06T16:45:14Z","updated_at":"2026-11-03T01:56:31.667445Z"}],"ghsa":[{"id":"GHSA-3vxx-8f6w-cpxp","title":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or -...","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","status":"published","published":"2022-05-14T01:48:58Z","modified":"2023-02-02T05:04:35Z","updated_at":"2026-11-02T14:51:54.365671Z"}],"nvd":[{"id":"CVE-2013-4419","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","status":"published","published":"2013-11-05T20:55:29.397Z","modified":"2026-06-16T23:57:11.737Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"CVE-2013-4419","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","status":"published","published":"2013-11-05T20:55:29Z","modified":"2026-04-10T03:42:58.88029Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-4419","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","status":"published","published":"2013-11-05T20:55:29.397Z","modified":"2026-09-01T20:03:18.252447698Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"openSUSE-SU-2024:10032-1","title":"guestfs-data-1.32.4-11.1 on GA media","description":"These are all security issues fixed in the guestfs-data-1.32.4-11.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:36:52.745805Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2013:1536","title":"Red Hat Security Advisory: libguestfs security, bug fix, and enhancement update","status":"published","published":"2024-09-15T20:54:41Z","modified":"2026-06-26T12:21:45.45681571Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2013-4419","description":"The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.","status":"published","published":"2013-11-05T20:55:00Z","modified":"2026-10-17T12:52:41.731500281Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}