CVE-2008-1945

LOW CVSS: 2.1 Published: 2008-08-08 Modified: 2026-06-16

Description

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.

Affected Platforms

Canonical Ubuntu LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux WorkstationRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerDebian Debian LinuxOpensuse OpensuseQemu QemuSuse Linux Enterprise Server

Weakness Type

NVD-CWE-noinfo

References

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
http://secunia.com/advisories/32063
http://secunia.com/advisories/32088
http://secunia.com/advisories/34642
http://secunia.com/advisories/35031
http://secunia.com/advisories/35062