PT-2008-3525 · Qemu+1 · Qemu+1

Avi Kivity

·

Publicado

2008-05-12

·

Atualizado

2017-09-29

·

CVE-2008-2004

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions QEMU version 0.9.1
Description The issue allows local guest users to read arbitrary files on the host by modifying the header of a raw disk image to identify a different format. This is possible due to the drive init function in QEMU, which determines the format of a raw disk image based on the header. The modified header is used when the guest is restarted.
Recommendations For QEMU version 0.9.1, as a temporary workaround, consider restricting access to the drive init function until a patch is available. Additionally, avoid using the raw disk image feature with untrusted guests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2008-2004
DTSA-133-1
RHSA-2008:0194
RHSA-2008_0194

Produtos afetados

Qemu
Red Hat