Unscored severity · published Mar 3, 2008
CVE-2008-0928
Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QE
Qemu · Qemu
0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; 0.1.5; +23 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0928
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0928
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
marc.info
http://marc.info/?l=debian-security&m=120343592917055&w=2
secunia.com
http://secunia.com/advisories/29081
secunia.com
http://secunia.com/advisories/29129
secunia.com
http://secunia.com/advisories/29136
Vendor Advisory
http://secunia.com/advisories/29172
More from Qemu
10.0
CVE-2022-36648
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially…
10.0
CVE-2017-16845
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access
10.0
CVE-2015-8556
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1
9.9
CVE-2016-9603
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update…
9.9
CVE-2017-2620
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue