Skip to content
OpenAdvisories
High · 7.8 CVE-2023-0664 EUVD-2023-12697GHSA-mvgg-p48p-h9jc

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Wi…

Published Mar 29, 2023 · Updated Feb 18, 2025 · Assigned by redhat

Category: Virtualization

Description

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

Affected products

VendorProductAffectedFixed
— QEMU unknown —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 virtio-win 1.9.33-0.el9_2 RHBA-2023:2451

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 hivex +4 1.3.18-21.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 libguestfs-appliance 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 8 libguestfs-winsupport 8.2-1.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 libiscsi +2 1.18.0-8.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 libnbd +3 1.2.2-1.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 libnbd-bash-completion 1.6.0-5.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 8 libtpms +1 0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 8 libvirt +29 5.7.0-40.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 libvirt-dbus 1.3.0-2.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 libvirt-wireshark 7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 8 nbdkit +13 1.16.2-4.0.1.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 nbdkit-nbd-plugin +4 1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 8 netcf +2 0.2.8-12.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 perl-Sys-Virt 4.5.0-5.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 qemu-img +9 15:4.2.1-26.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 qemu-virtiofsd 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 8 seabios +2 1.15.0-2.module+el8.10.0+90374+95a91213 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 sgabios +1 1:0.20170427git-3.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 supermin +1 5.1.19-10.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 swtpm +4 0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 8 virt-dib +23 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348 ELSA-2024-12605, ELSA-2023-12342
Oracle Linux 8 virt-v2v-man-pages-ja +2 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605
Oracle Linux 7 qemu +12 15:4.2.1-26.el7 ELSA-2023-12368

Advisories 5

References