High severity7.9NVD Advisory· Published Jan 23, 2017· Updated May 13, 2026
CVE-2016-9379
CVE-2016-9379
Description
The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- xenbits.xen.org/xsa/advisory-198.htmlnvdPatchVendor Advisory
- xenbits.xen.org/xsa/xsa198.patchnvdPatchVendor Advisory
- support.citrix.com/article/CTX218775nvdPatchThird Party Advisory
- www.securityfocus.com/bid/94473nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1037347nvdThird Party AdvisoryVDB Entry
- security.gentoo.org/glsa/201612-56nvd
News mentions
0No linked articles in our index yet.