Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qemu | Qemu | 0.1.0 (including) | 0.1.0 (including) |
| Qemu | Qemu | 0.1.1 (including) | 0.1.1 (including) |
| Qemu | Qemu | 0.1.2 (including) | 0.1.2 (including) |
| Qemu | Qemu | 0.1.3 (including) | 0.1.3 (including) |
| Qemu | Qemu | 0.1.4 (including) | 0.1.4 (including) |
| Qemu | Qemu | 0.1.5 (including) | 0.1.5 (including) |
| Qemu | Qemu | 0.1.6 (including) | 0.1.6 (including) |
| Qemu | Qemu | 0.2.0 (including) | 0.2.0 (including) |
| Qemu | Qemu | 0.3.0 (including) | 0.3.0 (including) |
| Qemu | Qemu | 0.4.0 (including) | 0.4.0 (including) |
| Qemu | Qemu | 0.4.1 (including) | 0.4.1 (including) |
| Qemu | Qemu | 0.4.2 (including) | 0.4.2 (including) |
| Qemu | Qemu | 0.4.3 (including) | 0.4.3 (including) |
| Qemu | Qemu | 0.5.0 (including) | 0.5.0 (including) |
| Qemu | Qemu | 0.5.1 (including) | 0.5.1 (including) |
| Qemu | Qemu | 0.5.2 (including) | 0.5.2 (including) |
| Qemu | Qemu | 0.5.3 (including) | 0.5.3 (including) |
| Qemu | Qemu | 0.5.4 (including) | 0.5.4 (including) |
| Qemu | Qemu | 0.5.5 (including) | 0.5.5 (including) |
| Qemu | Qemu | 0.6.0 (including) | 0.6.0 (including) |
| Qemu | Qemu | 0.6.1 (including) | 0.6.1 (including) |
| Qemu | Qemu | 0.7.0 (including) | 0.7.0 (including) |
| Qemu | Qemu | 0.7.1 (including) | 0.7.1 (including) |
| Qemu | Qemu | 0.7.2 (including) | 0.7.2 (including) |
| Qemu | Qemu | 0.8.0 (including) | 0.8.0 (including) |
| Qemu | Qemu | 0.8.1 (including) | 0.8.1 (including) |
| Qemu | Qemu | 0.8.2 (including) | 0.8.2 (including) |
| Qemu | Qemu | 0.9.0 (including) | 0.9.0 (including) |
| Qemu | Qemu | 0.9.1 (including) | 0.9.1 (including) |
| Red Hat Enterprise Linux 5 | RedHat | xen-0:3.0.3-41.el5_1.5 | * |
| Kvm | Ubuntu | feisty | * |
| Kvm | Ubuntu | gutsy | * |
| Kvm | Ubuntu | hardy | * |
| Kvm | Ubuntu | upstream | * |
| Qemu | Ubuntu | dapper | * |
| Qemu | Ubuntu | edgy | * |
| Qemu | Ubuntu | feisty | * |
| Qemu | Ubuntu | gutsy | * |
| Qemu | Ubuntu | hardy | * |
| Qemu | Ubuntu | upstream | * |
| Xen-3.0 | Ubuntu | edgy | * |
| Xen-3.0 | Ubuntu | feisty | * |
| Xen-3.1 | Ubuntu | gutsy | * |
| Xen-3.1 | Ubuntu | hardy | * |
| Xen-3.1 | Ubuntu | intrepid | * |
| Xen-3.2 | Ubuntu | hardy | * |
| Xen-3.2 | Ubuntu | upstream | * |