Advertisement
Aztek Networks. Linux, C++ developers wanted. Embedded, Power-PC target.
Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
qemu: insufficient block device address range checking
| Package(s): | qemu, zen | CVE #(s): | CVE-2008-0928 | ||||||||||||
| Created: | February 29, 2008 | Updated: | May 16, 2008 | ||||||||||||
| Description: | From Debian Security: Ian Jackson discovered that accesses beyond end of qemu emulated disk devices can result in accesses to emulator's virtual memory space accesses and thus can allow user with sufficient privilege in guest (root, as this would need modification to kernel's driver) to break out of VM. | ||||||||||||||
| Alerts: |
| ||||||||||||||
(Log in to post comments)