p PatchFirst

CVE-2008-0928

CVE-2008-0928

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qemu Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.9.1+svn20081207-1

    Update to 0.9.1+svn20081207-1

  • qemu Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.9.1+svn20081207-1

    Update to 0.9.1+svn20081207-1

  • qemu Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.9.1+svn20081207-1

    Update to 0.9.1+svn20081207-1

Original sources

Check your server →