CVE-2016-9638: Bmc Patrol

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root.

Affected products

• Bmc Patrol: up to and including 9.13.10.01

Published 2016-12-02. Last modified 2026-06-17.