CVE-2023-5088: Qemu: improper ide controller reset can lead to mbr overwrite
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-5088?
CVE-2023-5088 is a vulnerability in QEMU that can result in the overwrite of a VM's boot code due to an improper IDE controller reset.
What is the severity level of CVE-2023-5088?
CVE-2023-5088 has a severity level of medium.
How does CVE-2023-5088 affect QEMU?
CVE-2023-5088 affects QEMU by causing a guest I/O operation to be targeted to offset 0 instead of the intended disk offset, potentially overwriting the VM's boot code.
Is there a fix available for CVE-2023-5088?
Yes, a fix is available for CVE-2023-5088. Please refer to the vendor's security advisory for more information.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-5088?
The Common Weakness Enumeration (CWE) ID for CVE-2023-5088 is CWE-821.