CVE-2016-9638

HIGH 7.8CVE-2016-9638 · Published 02/12/2016 · updated 17/06/2026

In short

CVE-2016-9638 is a HIGH (CVSS 7.8) vulnerability affecting patrol (bmc).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
patrol bmc	`≤ 9.13.10.01`	No fix yet

Description

In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root.

References

nes.fr/securitylab/index.php/2016/12/02/privilege-escalation-on-bmc-patrol · Exploit
securityfocus.com/bid/95009 · Third Party Advisory
securitytracker.com/id/1037385

More vulnerabilities in patrol

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free