Unrated
libguestfs — security advisory
The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.
- Products
- libguestfs
- Affected versions
- 1:1.28.12-1ubuntu2, 1:1.28.12-1ubuntu3, 1:1.30.6-1ubuntu1, 1:1.30.6-1ubuntu2, 1:1.32.2-3ubuntu1, 1:1.32.2-4ubuntu1, 1:1.32.2-4ubuntu2, 1:1.32.2-4ubuntu2.2, 1:1.34.6-7ubuntu1, 1:1.36.10-1ubuntu2, 1:1.36.10-1ubuntu3, 1:1.36.11-1ubuntu1, 1:1.36.13-1ubuntu2, 1:1.36.13-1ubuntu3, 1:1.36.13-1ubuntu3.1, 1:1.36.13-1ubuntu3.2, 1:1.36.13-1ubuntu3.3, 1:1.40.2-2ubuntu6, 1:1.40.2-2ubuntu8, 1:1.40.2-7ubuntu3, 1:1.40.2-7ubuntu4, 1:1.40.2-7ubuntu5, 1:1.44.1-1ubuntu10, 1:1.44.1-1ubuntu11, 1:1.44.1-1ubuntu6, 1:1.44.1-1ubuntu9, 1:1.46.2-10ubuntu2, 1:1.46.2-10ubuntu3, 1:1.50.1-4ubuntu1, 1:1.50.1-4ubuntu2, 1:1.52.0-2ubuntu1, 1:1.52.0-2ubuntu2, 1:1.52.0-5ubuntu1, 1:1.52.0-5ubuntu2, 1:1.52.0-5ubuntu3, 1:1.54.1-1ubuntu3, 1:1.54.1-2ubuntu2, 1:1.54.1-2ubuntu3, 1:1.54.1-2ubuntu4, 1:1.54.1-2ubuntu5, 1:1.54.1-2ubuntu6, 1:1.54.1-2ubuntu7, 1:1.54.1-3.1ubuntu1, 1:1.54.1-3ubuntu1, 1:1.56.2-4ubuntu2, 1:1.56.2-4ubuntu3, 1:1.56.2-5ubuntu2, 1:1.56.2-6ubuntu1, 1:1.58.1-3ubuntu1, 1:1.58.1-3ubuntu2, 1:1.58.1-3ubuntu3, 1:1.58.1-5ubuntu2, 1:1.58.1-7ubuntu2.2, 1:1.58.1-7ubuntu4, 1:1.60.1-2ubuntu1
- Fixed versions
- Not specified
- CVEs
- CVE-2013-4419
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:20 UTC · Revision 1
Source evidence
The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.
osv:UBUNTU-CVE-2013-4419
libguestfs
Fixed versions: Not specified
libguestfs
Fixed versions: Not specified
libguestfs
Fixed versions: Not specified
libguestfs
Fixed versions: Not specified
libguestfs
Fixed versions: Not specified
libguestfs
Fixed versions: Not specified
libguestfs
Fixed versions: Not specified
libguestfs
Fixed versions: Not specified
Complete source record
{
"id": "91c367a455c25930917d304358bdc43d617ae78ac830eb7912e9e477450e9b9b",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2013-4419",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2013-4419",
"summary": "The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.",
"evidence": "osv:UBUNTU-CVE-2013-4419",
"products": [
{
"name": {
"value": "libguestfs",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.28.12-1ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "1:1.28.12-1ubuntu3",
"evidence": "/affected/0/versions"
},
{
"value": "1:1.30.6-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "1:1.30.6-1ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "1:1.32.2-3ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "1:1.32.2-4ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "1:1.32.2-4ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "1:1.32.2-4ubuntu2.2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "libguestfs",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.34.6-7ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.10-1ubuntu2",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.10-1ubuntu3",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.11-1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.13-1ubuntu2",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.13-1ubuntu3",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.13-1ubuntu3.1",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.13-1ubuntu3.2",
"evidence": "/affected/1/versions"
},
{
"value": "1:1.36.13-1ubuntu3.3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "libguestfs",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.40.2-2ubuntu6",
"evidence": "/affected/2/versions"
},
{
"value": "1:1.40.2-2ubuntu8",
"evidence": "/affected/2/versions"
},
{
"value": "1:1.40.2-7ubuntu3",
"evidence": "/affected/2/versions"
},
{
"value": "1:1.40.2-7ubuntu4",
"evidence": "/affected/2/versions"
},
{
"value": "1:1.40.2-7ubuntu5",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "libguestfs",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.44.1-1ubuntu6",
"evidence": "/affected/3/versions"
},
{
"value": "1:1.44.1-1ubuntu9",
"evidence": "/affected/3/versions"
},
{
"value": "1:1.44.1-1ubuntu10",
"evidence": "/affected/3/versions"
},
{
"value": "1:1.44.1-1ubuntu11",
"evidence": "/affected/3/versions"
},
{
"value": "1:1.46.2-10ubuntu2",
"evidence": "/affected/3/versions"
},
{
"value": "1:1.46.2-10ubuntu3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "libguestfs",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.50.1-4ubuntu1",
"evidence": "/affected/4/versions"
},
{
"value": "1:1.50.1-4ubuntu2",
"evidence": "/affected/4/versions"
},
{
"value": "1:1.52.0-2ubuntu1",
"evidence": "/affected/4/versions"
},
{
"value": "1:1.52.0-2ubuntu2",
"evidence": "/affected/4/versions"
},
{
"value": "1:1.52.0-5ubuntu1",
"evidence": "/affected/4/versions"
},
{
"value": "1:1.52.0-5ubuntu2",
"evidence": "/affected/4/versions"
},
{
"value": "1:1.52.0-5ubuntu3",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "libguestfs",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.54.1-1ubuntu3",
"evidence": "/affected/5/versions"
},
{
"value": "1:1.54.1-2ubuntu2",
"evidence": "/affected/5/versions"
},
{
"value": "1:1.54.1-2ubuntu3",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "libguestfs",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.58.1-3ubuntu3",
"evidence": "/affected/6/versions"
},
{
"value": "1:1.58.1-5ubuntu2",
"evidence": "/affected/6/versions"
},
{
"value": "1:1.58.1-7ubuntu2.2",
"evidence": "/affected/6/versions"
},
{
"value": "1:1.58.1-7ubuntu4",
"evidence": "/affected/6/versions"
},
{
"value": "1:1.60.1-2ubuntu1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "libguestfs",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.54.1-2ubuntu3",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.54.1-2ubuntu4",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.54.1-2ubuntu5",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.54.1-2ubuntu6",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.54.1-2ubuntu7",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.54.1-3ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.54.1-3.1ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.56.2-4ubuntu2",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.56.2-4ubuntu3",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.56.2-5ubuntu2",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.56.2-6ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.58.1-3ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.58.1-3ubuntu2",
"evidence": "/affected/7/versions"
},
{
"value": "1:1.58.1-3ubuntu3",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "UBUNTU-CVE-2013-4419",
"aliases": [
"UBUNTU-CVE-2013-4419"
],
"metrics": [
{
"type": "Ubuntu",
"score": "low"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1:1.28.12-1ubuntu2",
"1:1.28.12-1ubuntu3",
"1:1.30.6-1ubuntu1",
"1:1.30.6-1ubuntu2",
"1:1.32.2-3ubuntu1",
"1:1.32.2-4ubuntu1",
"1:1.32.2-4ubuntu2",
"1:1.32.2-4ubuntu2.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "python-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1:1.34.6-7ubuntu1",
"1:1.36.10-1ubuntu2",
"1:1.36.10-1ubuntu3",
"1:1.36.11-1ubuntu1",
"1:1.36.13-1ubuntu2",
"1:1.36.13-1ubuntu3",
"1:1.36.13-1ubuntu3.1",
"1:1.36.13-1ubuntu3.2",
"1:1.36.13-1ubuntu3.3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "python-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1:1.40.2-2ubuntu6",
"1:1.40.2-2ubuntu8",
"1:1.40.2-7ubuntu3",
"1:1.40.2-7ubuntu4",
"1:1.40.2-7ubuntu5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1:1.44.1-1ubuntu6",
"1:1.44.1-1ubuntu9",
"1:1.44.1-1ubuntu10",
"1:1.44.1-1ubuntu11",
"1:1.46.2-10ubuntu2",
"1:1.46.2-10ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1:1.50.1-4ubuntu1",
"1:1.50.1-4ubuntu2",
"1:1.52.0-2ubuntu1",
"1:1.52.0-2ubuntu2",
"1:1.52.0-5ubuntu1",
"1:1.52.0-5ubuntu2",
"1:1.52.0-5ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0t64",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs0t64",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"1:1.54.1-1ubuntu3",
"1:1.54.1-2ubuntu2",
"1:1.54.1-2ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0t64",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs0t64",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"1:1.58.1-3ubuntu3",
"1:1.58.1-5ubuntu2",
"1:1.58.1-7ubuntu2.2",
"1:1.58.1-7ubuntu4",
"1:1.60.1-2ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "libguestfs0t64",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.60.1-2ubuntu1"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.60.1-2ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libguestfs",
"purl": "pkg:deb/ubuntu/libguestfs?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1:1.54.1-2ubuntu3",
"1:1.54.1-2ubuntu4",
"1:1.54.1-2ubuntu5",
"1:1.54.1-2ubuntu6",
"1:1.54.1-2ubuntu7",
"1:1.54.1-3ubuntu1",
"1:1.54.1-3.1ubuntu1",
"1:1.56.2-4ubuntu2",
"1:1.56.2-4ubuntu3",
"1:1.56.2-5ubuntu2",
"1:1.56.2-6ubuntu1",
"1:1.58.1-3ubuntu1",
"1:1.58.1-3ubuntu2",
"1:1.58.1-3ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4419.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0t64",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs0t64",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
}
]
}
}
],
"modified": "2026-10-17T12:52:41.731500281Z",
"provider": "osv",
"upstream": [
"CVE-2013-4419"
],
"references": [
"https://ubuntu.com/security/CVE-2013-4419",
"https://bugzilla.redhat.com/show_bug.cgi?id=1016960",
"https://www.cve.org/CVERecord?id=CVE-2013-4419"
]
},
"related_cves": [
{
"value": "CVE-2013-4419",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 353273,
"published_at": "2013-11-05T20:55:00+00:00"
}