Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xen-develUpgrade xenUpgrade xen-libs | Dec 1, 2016 | Mar 3, 2008 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 3, 2008 |
| Freebsd | — | Upgrade qemu-develUpgrade qemu | Dec 10, 2025 | Mar 11, 2008 |
| Oracle_linux | — | Upgrade xenUpgrade xen-develUpgrade xen-libs | Oct 16, 2024 | Mar 3, 2008 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-headlessUpgrade qemu-linux-userUpgrade qemu-audio-dbusUpgrade qemu-SLOFUpgrade qemu-toolsUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ivshmem-toolsUpgrade qemu-block-nfsUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-docUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-alsaUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-pr-helperUpgrade qemu-block-dmgUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-vhost-user-gpuUpgrade qemu-imgUpgrade qemu-vgabiosUpgrade qemu-hw-usb-hostUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-audio-jackUpgrade qemu-vmsr-helperUpgrade qemu-extra | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kvm | Nov 19, 2024 | Mar 3, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub