CVE Catalog
CVE-2016-9380
HighSummary
The pygrub boot loader emulator in Xen allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.
Risk Assessment
This vulnerability may lead to unauthorized access to files on the host, posing a serious threat to data integrity and confidentiality.
Recommendation
It is recommended to restrict the privileges of guest OS administrators and to monitor bootloader configuration files for unauthorized changes.
Other vulnerabilities in Xen pygrub boot loader emulator
Original NVD description (English source)
The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.