Detections
Analytics
FreeBSD : qemu -- unchecked block read/write vulnerability (9cfbca7f-efb7-11dc-be01-0211060005df)
medium Nessus Plugin ID 31437
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Ian Jackson reports on the debian-security mailinglist :When a block device read or write request is made by the guest, nothing checks that the request is within the range supported by the backend, but the code in the backend typically assumes that the request is sensible.
Depending on the backend, this can allow the guest to read and write arbitrary memory locations in qemu, and possibly gain control over the qemu process, escaping from the emulation/virtualisation.
Solution
Update the affected packages.See Also
https://lists.debian.org/debian-security/2008/02/msg00064.html
Plugin Details
Severity: Medium
ID: 31437
File Name: freebsd_pkg_9cfbca7fefb711dcbe010211060005df.nasl
Version: 1.15
Type: local
Family: FreeBSD Local Security Checks
Published: 3/13/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 4.7
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:N/A:N
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:qemu, p-cpe:/a:freebsd:freebsd:qemu-devel, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 3/11/2008
Vulnerability Publication Date: 2/19/2008
Reference Information
CVE: CVE-2008-0928