QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xen-libsUpgrade xen-develUpgrade xen | Dec 1, 2016 | Aug 8, 2008 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 8, 2008 |
| Oracle_linux | — | Upgrade xen-libsUpgrade xen-develUpgrade xen | Oct 16, 2024 | Aug 8, 2008 |
| Suse | — | Upgrade qemu-docUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-ivshmem-toolsUpgrade qemu-headlessUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-nfsUpgrade qemu-audio-jackUpgrade qemu-ppcUpgrade qemu-hw-usb-hostUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-SLOFUpgrade qemu-block-rbdUpgrade qemu-microvmUpgrade qemu-toolsUpgrade qemu-audio-dbusUpgrade qemu-vmsr-helperUpgrade qemu-vgabiosUpgrade qemu-pr-helperUpgrade qemu-s390Upgrade qemu-hw-usb-smartcardUpgrade qemu-seabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-langUpgrade qemu-block-dmgUpgrade qemu-imgUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-armUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-extraUpgrade qemu-ipxeUpgrade qemu-linux-user | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kvm | Nov 8, 2024 | Aug 8, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub