Description
The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | xen +1 | 3.0.3-25.0.3.el5 | RHSA-2007:0114 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Virtualization 5 | xen +1 | 3.0.3-25.0.3.el5 | RHSA-2007:0114 |
Advisories 1
- RHSA-2007:0114 Red Hat Security Advisory: xen security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- fedora-xen-qemuvnc-information-disclosure(33085) vdb-entry
- 51413 third-party-advisory
- 22967 vdb-entry
- ADV-2007-1021 vdb-entry
- ADV-2007-1019 vdb-entry
- RHSA-2007:0114 vendor-advisory
- 34304 vdb-entry
- ADV-2007-1020 vdb-entry
- oval:org.mitre.oval:def:10486 vdb-entry signature
- openSUSE-SU-2012:1572 vendor-advisory
- FEDORA-2007-344 vendor-advisory
- SUSE-SU-2014:0446 vendor-advisory
- FEDORA-2007-343 vendor-advisory
- 24575 third-party-advisory
- 1017764 vdb-entry
- openSUSE-SU-2012:1573 vendor-advisory