| Package | Affected versions | Patched versions |
|---|---|---|
| xenserver | = 6.0.2= 6.2.0= 6.5= 7.0 |
The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free