CVE-2008-4539Improper Restriction of Operations within the Bounds of a Memory Buffer in Qemu

Severity
7.2HIGHNVD
EPSS
0.0%
top 85.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 29
Latest updateMay 2

Description

Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages4 packages

debiandebian/qemu< qemu 0.9.1+svn20081101-1 (bookworm)
NVDqemu/qemu< 0.10.0
Debianqemu/qemu< 0.9.1+svn20081101-1+3

Also affects: Debian Linux 4.0, 5.0, Ubuntu Linux 8.04, 8.10

🔴Vulnerability Details

2
GHSA
GHSA-gq7c-3rjh-ggvh: Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local use2022-05-02
OSV
CVE-2008-4539: Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local use2008-12-29

📋Vendor Advisories

4
Ubuntu
KVM regression2009-05-13
Ubuntu
KVM vulnerabilities2009-05-12
Red Hat
kvm/qemu/xen: Incomplete upstream fix for CVE-2007-13202008-10-29
Debian
CVE-2008-4539: qemu - Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kv...2008

💬Community

4
Bugzilla
CVE-2008-4539 kvm/qemu/xen: Incomplete upstream fix for CVE-2007-13202008-10-14
Bugzilla
CVE-2007-1320 xen/qemu Cirrus LGD-54XX "bitblt" Heap Overflow [Fedora 8]2008-05-27
Bugzilla
CVE-2007-1320 xen/qemu Cirrus LGD-54XX "bitblt" Heap Overflow [Fedora 9]2008-05-27
Bugzilla
CVE-2007-1320 xen/qemu Cirrus LGD-54XX "bitblt" Heap Overflow2007-04-20