CVE-2008-2004: Infoleak
The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2004?
CVE-2008-2004 is classified as a medium severity vulnerability due to its potential for information disclosure.
How can CVE-2008-2004 be mitigated?
To mitigate CVE-2008-2004, you should upgrade to a version of QEMU later than 0.9.1 or secure the host environment against unauthorized guest access.
What impact does CVE-2008-2004 have on QEMU users?
CVE-2008-2004 allows local guest users to read arbitrary files on the host machine, leading to potential data exposure.
What versions of QEMU are affected by CVE-2008-2004?
CVE-2008-2004 specifically affects QEMU version 0.9.1.
Is there a patch available for CVE-2008-2004?
No specific patch is available for CVE-2008-2004, but upgrading to a newer version of QEMU will resolve the vulnerability.