The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xen-develUpgrade xen-libsUpgrade xen | Dec 1, 2016 | May 12, 2008 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | May 12, 2008 |
| Freebsd | — | Upgrade qemuUpgrade qemu-devel | Dec 10, 2025 | May 8, 2008 |
| Oracle_linux | — | Upgrade xen-libsUpgrade xen-develUpgrade xen | Oct 16, 2024 | May 12, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade qemu | Feb 17, 2015 | May 12, 2008 |
| Ubuntu | — | Upgrade kvm | Nov 8, 2024 | May 12, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub