PT-2008-3525 · Qemu+1 · Qemu+1
Avi Kivity
·
Publicado
2008-05-12
·
Atualizado
2017-09-29
·
CVE-2008-2004
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
QEMU version 0.9.1
Description
The issue allows local guest users to read arbitrary files on the host by modifying the header of a raw disk image to identify a different format. This is possible due to the
drive init function in QEMU, which determines the format of a raw disk image based on the header. The modified header is used when the guest is restarted.Recommendations
For QEMU version 0.9.1, as a temporary workaround, consider restricting access to the
drive init function until a patch is available. Additionally, avoid using the raw disk image feature with untrusted guests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Qemu
Red Hat