CVE-2008-0928 Missing authorization in n/a
Root users in a guest VM can escape to the host and execute arbitrary code due to missing range checks in QEMU block device operations.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-0928?
CVE-2008-0928 is a medium-severity missing authorization vulnerability in Qemu Qemu, published on 3 Mar 2008. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
Weakness: CWE-264
Which versions are affected by CVE-2008-0928?
It affects 1 product.
Products include Qemu Qemu.
How do I fix CVE-2008-0928?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2008-0928 being exploited?
There is no known exploitation of CVE-2008-0928 in the wild and no public exploit code.
Other vulnerabilities in Qemu Qemu
Sources
Also known as CVE-2008-1112, DEBIAN-CVE-2008-0928, GHSA-4gr3-prqp-v6r3.