diff options
| author | Juergen Lock <nox@FreeBSD.org> | 2008-03-11 23:09:30 +0000 |
|---|---|---|
| committer | Juergen Lock <nox@FreeBSD.org> | 2008-03-11 23:09:30 +0000 |
| commit | f18aabea39fbc233977878d8186c76a81adb4d9f (patch) | |
| tree | 9d1adc41fdfd5463d981a47237bbad0607685db6 /security | |
| parent | d9f2006450b61f053354d152781b9a372c0b9e23 (diff) | |
Notes
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 3c592fd136bd..6274e5b89c81 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,40 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="9cfbca7f-efb7-11dc-be01-0211060005df"> + <topic>qemu -- unchecked block read/write vulnerability</topic> + <affects> + <package> + <name>qemu</name> + <name>qemu-devel</name> + <range><lt>0.9.1_2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Ian Jackson reports on the debian-security mailinglist:</p> + <blockquote cite="http://lists.debian.org/debian-security/2008/02/msg00064.html"> + <p>When a block device read or write request is made by the guest, + nothing checks that the request is within the range supported by the + backend, but the code in the backend typically assumes that the + request is sensible.</p> + <p>Depending on the backend, this can allow the guest to read + and write arbitrary memory locations in qemu, and possibly gain + control over the qemu process, escaping from the + emulation/virtualisation.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2008-0928</cvename> + <mlist msgid="18362.62578.44273.779731@mariner.uk.xensource.com">http://lists.debian.org/debian-security/2008/02/msg00064.html</mlist> + </references> + <dates> + <discovery>2008-02-19</discovery> + <entry>2008-03-11</entry> + </dates> + </vuln> + <vuln vid="b39bdc06-ee42-11dc-8678-00a0cce0781e"> <topic>dovecot -- security hole in blocking passdbs</topic> <affects> |