Published: 29/12/2008 Updated: 07/11/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kvm_qumranet kvm
qemu qemu
canonical ubuntu linux 8.10
canonical ubuntu linux 8.04
debian debian linux 5.0
debian debian linux 4.0

Debian Bug report logs - #526040 qemu: CVE-2008-4539 buffer overlflow vulnerability Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Tue, 28 Apr 2009 ...

Debian Bug report logs - #526013 qemu: CVE-2008-1945 media handling vulnerability Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Tue, 28 Apr 2009 17 ...

USN-776-1 fixed vulnerabilities in KVM Due to an incorrect fix, a regression was introduced in Ubuntu 804 LTS that caused KVM to fail to boot virtual machines started via libvirt This update fixes the problem We apologize for the inconvenience ...

Avi Kivity discovered that KVM did not correctly handle certain disk formats A local attacker could attach a malicious partition that would allow the guest VM to read files on the VM host (CVE-2008-1945, CVE-2008-2004) ...

CWE-119 http://secunia.com/advisories/25073 https://bugzilla.redhat.com/show_bug.cgi?id=237342 http://secunia.com/advisories/33350 https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html http://groups.google.com/group/linux.debian.changes.devel/msg/9e0dc008572f2867?dmode=source https://bugzilla.redhat.com/show_bug.cgi?id=466890 http://secunia.com/advisories/29129 https://launchpad.net/ubuntu/jaunty/+source/qemu/0.9.1+svn20081112-1ubuntu1 https://bugzilla.redhat.com/show_bug.cgi?id=448525 http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5587 http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html http://secunia.com/advisories/34642 http://www.debian.org/security/2009/dsa-1799 http://www.ubuntu.com/usn/usn-776-1 http://secunia.com/advisories/35031 http://secunia.com/advisories/35062 https://exchange.xforce.ibmcloud.com/vulnerabilities/47736 http://www.mail-archive.com/secure-testing-commits%40lists.alioth.debian.org/msg09322.html http://www.mail-archive.com/cvs-all%40freebsd.org/msg129730.html http://git.kernel.dk/?p=qemu.git%3Ba=commitdiff%3Bh=65d35a09979e63541afc5bfc595b9f1b1b4ae069 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526040 https://usn.ubuntu.com/776-2/

CVE-2008-4539

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect