Comment 46 for bug 2059809
Revision history for this message
| Martin Kaesberger (mkaesberger) wrote Re: Arbitrary file access through QCOW2 external data file | #46 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
My understanding of the patch is, that something like `qemu-img info --output-json image.qcow2` is invoked and the resulting JSON is checked for a data file. This example shows that even this call can exfiltrate/