--- title: "CVE-2013-1922\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2013-1922?format=md keywords: index, follow --- # CVE-2013-1922 Publication date 15 April 2013 Last updated 24 July 2024 --- Ubuntu priority **Low** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004. [Read the notes from the security team](https://ubuntu.com/security/CVE-2013-1922?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | qemu | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not affected | | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not affected | | 13.10 saucy | Not affected | | 13.04 raring | Ignored end of life | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 11.10 oneiric | Not in release | | 10.04 LTS lucid | Not in release | | 8.04 LTS hardy | Ignored end of life | | qemu-kvm | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 13.04 raring | Not in release | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Ignored | | 11.10 oneiric | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | 8.04 LTS hardy | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2013-1922?format=md#patch-details) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) attack is: privileged attacker in the guest that uses a raw image writes data to beginning of device. Later, someone on the host uses qemu-nbd on the attacker-modified image. When the guest is rebooted, the attacker may have access to other files. On Ubuntu, the preferred virtualization management technology is libvirt. As of USN-1008-1, libvirt does not probe the disk format, which reduces this attack to a denial of server for the guest (ie, the attacker-modified image is not usable on reboot). TODO: review use in nova --- ### [mdeslaur](https://launchpad.net/~mdeslaur) patch just introduced new --format option. Default behaviour is still to autodetect. Adding this new option doesn't fix the issue by itself, so marking as "low" We will not be fixing this issue in Ubuntu 12.04 LTS. ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | qemu | * Upstream: | | qemu-kvm | * Upstream: | ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1922) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2013-1922) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2013-1922) * [Debian](https://security-tracker.debian.org/tracker/CVE-2013-1922) ### Other references * *