Wind River Support Network

HomeDefectsLIN1018-10377
Acknowledged

LIN1018-10377 : Security Advisory - qemu - CVE-2023-0664

Created: Feb 23, 2023    Updated: Apr 15, 2024
Resolved Date: Feb 23, 2023
Found In Version: 10.18.44.1
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

https://nvd.nist.gov/vuln/detail/CVE-2023-0664
  • Linkedin
  • Facebook
  • Twitter
  • Youtube