PT-2023-6849 · Qemu+10 · Qemu+10
Simon Rowe
·
Published
2023-09-20
·
Updated
2025-04-30
·
CVE-2023-5088
CVSS v3.1
6.4
Medium
| Vector | AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
QEMU (affected versions not specified)
Description
A bug in QEMU could cause a guest I/O operation to be targeted to offset 0 instead of an arbitrary disk offset, potentially overwriting the VM's boot code. This could allow an attacker to read and/or write data to LBA 0 of a virtual disk, potentially gaining control of the hypervisor at its next reboot. The vulnerability is related to errors in synchronization when handling the
DRQ STAT parameter in the ide dma cb() function of the QEMU hardware emulator.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Qemu
Red Hat
Red Os
Rocky Linux
Ubuntu