Detections
Analytics
Debian DSA-1799-1 : qemu - several vulnerabilities
high Nessus Plugin ID 38747
Synopsis
The remote Debian host is missing a security-related update.Description
Several vulnerabilities have been discovered in the QEMU processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems :- CVE-2008-0928 Ian Jackson discovered that range checks of file operations on emulated disk devices were insufficiently enforced.
- CVE-2008-1945 It was discovered that an error in the format auto detection of removable media could lead to the disclosure of files in the host system.
- CVE-2008-4539 A buffer overflow has been found in the emulation of the Cirrus graphics adaptor.
Solution
Upgrade the qemu packages.For the old stable distribution (etch), these problems have been fixed in version 0.8.2-4etch3.
For the stable distribution (lenny), these problems have been fixed in version 0.9.1-10lenny1.
See Also
https://security-tracker.debian.org/tracker/CVE-2008-0928
https://security-tracker.debian.org/tracker/CVE-2008-1945
Plugin Details
Severity: High
ID: 38747
File Name: debian_DSA-1799.nasl
Version: 1.15
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 5/13/2009
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:debian:debian_linux:4.0, p-cpe:/a:debian:debian_linux:qemu, cpe:/o:debian:debian_linux:5.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Ease: No known exploits are available
Patch Publication Date: 5/11/2009