CVE-2008-1945

Опубликовано: 08 авг. 2008

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/32063
Third Party Advisory
http://secunia.com/advisories/32088
Third Party Advisory
http://secunia.com/advisories/34642
Third Party Advisory
http://secunia.com/advisories/35031
Third Party Advisory
http://secunia.com/advisories/35062
Third Party Advisory
http://www.debian.org/security/2009/dsa-1799
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:162
Third Party Advisory
http://www.securityfocus.com/bid/30604
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1020959
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-776-1
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44269
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9905
Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2008-0892.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/32063
Third Party Advisory
http://secunia.com/advisories/32088
Third Party Advisory
http://secunia.com/advisories/34642
Third Party Advisory
http://secunia.com/advisories/35031
Third Party Advisory
http://secunia.com/advisories/35062
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:0.9.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:5.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.0009

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2008-1945

ubuntu

больше 17 лет назад

CVE-2008-1945

redhat

больше 17 лет назад

CVE-2008-1945

debian

больше 17 лет назад

QEMU 0.9.0 does not properly handle changes to removable media, which ...

GHSA-vvm6-gvx4-5r3v

github

почти 4 года назад

ELSA-2008-0892

oracle-oval

больше 17 лет назад

ELSA-2008-0892: xen security and bug fix update (IMPORTANT)

EPSS

Процентиль: 26%

0.0009

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo