cbcvebase.
CVE-2008-2004
published 2008-05-12

CVE-2008-2004: The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on…

PriorityP416medium4.9CVSS 2.0
AVLACLAuNCCINAN
EPSS
0.51%
42.5th percentile
The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux——
canonicalubuntu_linux——
debiandebian_linux——
debiandebian_linux——
debianqemu< qemu 1.5.0+dfsg-1 (bookworm)qemu 1.5.0+dfsg-1 (bookworm)
debianqemu< qemu 0.9.1-5 (bookworm)qemu 0.9.1-5 (bookworm)
debianxen< qemu 1.5.0+dfsg-1 (bookworm)qemu 1.5.0+dfsg-1 (bookworm)
opensuseopensuse——
opensuseopensuse——
opensuseopensuse——
qemuqemu——
qemuqemu——
qemuqemu>= 0 < 0.9.1-50.9.1-5
qemuqemu>= 0 < 1.5.0+dfsg-11.5.0+dfsg-1
qemuqemu>= 0 < 0.9.1-50.9.1-5
qemuqemu>= 0 < 1.5.0+dfsg-11.5.0+dfsg-1
qemuqemu>= 0 < 0.9.1-50.9.1-5
qemuqemu>= 0 < 1.5.0+dfsg-11.5.0+dfsg-1
qemuqemu>= 0 < 0.9.1-50.9.1-5
qemuqemu>= 0 < 1.5.0+dfsg-11.5.0+dfsg-1
redhatenterprise_linux_desktop——
redhatenterprise_linux_eus——
redhatenterprise_linux_server——
redhatenterprise_linux_workstation——
suselinux_enterprise_server——

CVSS provenance

nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:C/I:N/A:N
osv4.9MEDIUM
vendor_redhat10.0CRITICAL
vendor_debian4.9MEDIUM
vendor_ubuntu2.1LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.