Description
QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 0.9.1-5 | — |
| Debian 13 | qemu | 0.9.1-5 | — |
| Debian 12 | qemu | 0.9.1-5 | — |
| Debian 5.0 | qemu | 0.9.1-10lenny1 | DSA-1799-1 |
| Debian 4.0 | qemu | 0.8.2-4etch3 | DSA-1799-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | xen +1 | 3.0.3-64.el5_2.3 | RHSA-2008:0892 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Virtualization 5 | xen +1 | 3.0.3-64.el5_2.3 | RHSA-2008:0892 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | qemu +1 | 2.6.1-1.5 | openSUSE-SU-2024:10285-1, openSUSE-SU-2024:10233-1 |
Advisories 4
- RHSA-2008:0892 Red Hat Security Advisory: xen security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1799-1 qemu - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10285-1 qemu-linux-user-2.6.1-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10233-1 qemu-2.6.1-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 35062 third-party-advisory
- qemu-image-security-bypass(44269) vdb-entry
- 32088 third-party-advisory
- oval:org.mitre.oval:def:9905 vdb-entry signature
- 32063 third-party-advisory
- 34642 third-party-advisory
- MDVSA-2008:162 vendor-advisory
- USN-776-1 vendor-advisory
- 30604 vdb-entry
- SUSE-SR:2009:008 vendor-advisory
- DSA-1799 vendor-advisory
- RHSA-2008:0892 vendor-advisory
- 1020959 vdb-entry
- 35031 third-party-advisory