qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Xen | Xen | 4.2.0 (including) | 4.2.0 (including) |
Xen | Xen | 4.2.1 (including) | 4.2.1 (including) |
Xen | Xen | 4.2.2 (including) | 4.2.2 (including) |
Qemu | Ubuntu | hardy | * |
Qemu | Ubuntu | raring | * |
Qemu | Ubuntu | upstream | * |
Qemu-kvm | Ubuntu | lucid | * |
Qemu-kvm | Ubuntu | oneiric | * |
Qemu-kvm | Ubuntu | precise | * |
Qemu-kvm | Ubuntu | quantal | * |