PT-2008-3471 · Qemu+1 · Qemu+1

Avi Kivity · Published 2008-08-08 · Updated 2024-06-15 · CVE-2008-1945

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions QEMU version 0.9.0

Description The issue arises from improper handling of changes to removable media, allowing guest OS users to read arbitrary files on the host OS. This is achieved by modifying the disk-image header using the diskformat: parameter in the -usbdevice option to identify a different format.

Recommendations For QEMU version 0.9.0, consider restricting access to the -usbdevice option or avoiding the use of the diskformat: parameter until a fix is available. As a temporary workaround, restrict the ability of guest OS users to modify removable media settings to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2008-1945

DSA-1799-1

OPENSUSE-SU-2024:10233-1

OPENSUSE-SU-2024:10285-1

RHSA-2008:0892

RHSA-2008_0892

Affected Products

Qemu

Red Hat

References · 76

• https://security-tracker.debian.org/tracker/CVE-2008-1945 · Vendor Advisory
• http://ubuntu.com/usn/usn-776-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-1945 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10233-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-1945 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2008-0892.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10285-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:162 · Vendor Advisory
• http://debian.org/security/2009/dsa-1799 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1945 · Security Note
• https://suse.com/security/cve/CVE-2013-4531 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9905 · Note
• https://suse.com/security/cve/CVE-2013-4527 · Note
• http://securityfocus.com/bid/30604 · Note