Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xen-libsUpgrade xen-develUpgrade xen | Dec 1, 2016 | Mar 3, 2008 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 3, 2008 |
| Freebsd | — | Upgrade qemu-develUpgrade qemu | Dec 10, 2025 | Mar 11, 2008 |
| Oracle_linux | — | Upgrade xenUpgrade xen-develUpgrade xen-libs | Oct 16, 2024 | Mar 3, 2008 |
| Suse | — | Upgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-headlessUpgrade qemu-audio-ossUpgrade qemu-sgabiosUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-dbusUpgrade qemu-ppcUpgrade qemu-langUpgrade qemu-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-SLOFUpgrade qemu-linux-userUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade qemuUpgrade qemu-skibootUpgrade qemu-pr-helperUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-audio-jackUpgrade qemu-vgabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-docUpgrade qemu-kvmUpgrade qemu-hw-usb-smartcardUpgrade qemu-microvmUpgrade qemu-hw-usb-hostUpgrade qemu-imgUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-extraUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-vmsr-helper | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kvm | Nov 19, 2024 | Mar 3, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub