Lucene search

K
osvGoogleOSV:DSA-1657-1
HistoryOct 20, 2008 - 12:00 a.m.

qemu - denial of service

2008-10-2000:00:00
Google
osv.dev
5

0.0004 Low

EPSS

Percentile

5.1%

Dmitry E. Oboukhov discovered that the qemu-make-debian-root script in qemu,
fast processor emulator, creates temporary files insecurely, which may lead
to a local denial of service through symlink attacks.

For the stable distribution (etch), this problem has been fixed in
version 0.8.2-4etch2.

For the testing (lenny) and unstable distribution (sid), this problem has
been fixed in version 0.9.1-6.

We recommend that you upgrade your qemu package.

CPENameOperatorVersion
qemueq0.8.2-4etch1
qemueq0.8.2-4

0.0004 Low

EPSS

Percentile

5.1%