CVE-2008-0928
CVE-2008-0928
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
EPSS 0,4% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
n/a
- Softwareversionen
- n/a: Betroffen
Keine Korrektur veröffentlicht
qemu Debian:12
- Betroffene Versionsbereiche
- ECOSYSTEM: < 0.9.1+svn20081207-1
Auf 0.9.1+svn20081207-1 aktualisieren
qemu Debian:13
- Betroffene Versionsbereiche
- ECOSYSTEM: < 0.9.1+svn20081207-1
Auf 0.9.1+svn20081207-1 aktualisieren
qemu Debian:14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 0.9.1+svn20081207-1
Auf 0.9.1+svn20081207-1 aktualisieren
Originalquellen
- http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00850.html
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00852.html
- http://www.redhat.com/support/errata/RHSA-2008-0194.html
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00900.html
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00957.html
- https://bugzilla.redhat.com/show_bug.cgi?id=433560
- http://secunia.com/advisories/34642
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:016
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:162
- http://marc.info/?l=debian-security&m=120343592917055&w=2
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00857.html
- http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00830.html
- http://secunia.com/advisories/29963
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9706
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
- http://secunia.com/advisories/29129
- http://www.securityfocus.com/bid/28001
- http://www.debian.org/security/2009/dsa-1799
- http://secunia.com/advisories/29136
- http://secunia.com/advisories/35031
- http://secunia.com/advisories/29081
- http://secunia.com/advisories/29172
- https://nvd.nist.gov/vuln/detail/CVE-2008-0928