PT-2008-2542 · Qemu+1 · Qemu+1

Ian Jackson · Publicado 2008-03-03 · Atualizado 2024-06-15 · CVE-2008-0928

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qemu versions 0.9.1 and earlier

Description The issue allows guest host users with root privileges to access arbitrary memory and escape the virtual machine due to a lack of range checks for block device read or write requests.

Recommendations For Qemu versions 0.9.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0928

DSA-1799-1

DTSA-133-1

OPENSUSE-SU-2024:10233-1

OPENSUSE-SU-2024:10285-1

RHSA-2008:0194

RHSA-2008_0194

Produtos afetados

Qemu

Red Hat

Referências · 89

• https://access.redhat.com/security/cve/CVE-2007-5730 · Nota
• https://access.redhat.com/errata/RHSA-2008:0194 · Nota
• https://suse.com/security/cve/CVE-2013-4531 · Nota
• https://access.redhat.com/security/cve/CVE-2008-0928 · Nota
• https://access.redhat.com/security/cve/CVE-2008-2004 · Nota
• https://suse.com/security/cve/CVE-2013-4527 · Nota
• http://lists.gnu.org/archive/html/qemu-devel/2008-04/msg00675.html · Nota
• http://secunia.com/advisories/29081 · Nota
• https://suse.com/security/cve/CVE-2013-4150 · Nota
• https://suse.com/security/cve/CVE-2014-0147 · Nota
• https://suse.com/security/cve/CVE-2016-4453 · Nota
• https://access.redhat.com/security/cve/CVE-2007-3919 · Nota
• https://suse.com/security/cve/CVE-2013-4541 · Nota
• https://suse.com/security/cve/CVE-2016-4439 · Nota
• http://redhat.com/support/errata/RHSA-2008-0194.html · Aviso do Fabricante