CVE ID:	CVE-2008-0928
Description:	Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
Test IDs:	1.3.6.1.4.1.25623.1.0.65732   1.3.6.1.4.1.25623.1.0.122592   1.3.6.1.4.1.25623.1.0.860800   1.3.6.1.4.1.25623.1.0.860160   1.3.6.1.4.1.25623.1.0.860432   1.3.6.1.4.1.25623.1.0.860163   1.3.6.1.4.1.25623.1.0.60594   1.3.6.1.4.1.25623.1.0.63995   1.3.6.1.4.1.25623.1.0.860569
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0928 BugTraq ID: 28001 http://www.securityfocus.com/bid/28001 Debian Security Information: DSA-1799 (Google Search) http://www.debian.org/security/2009/dsa-1799 http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00830.html http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00850.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00852.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00857.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00900.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00957.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 http://www.mandriva.com/security/advisories?name=MDVSA-2009:016 http://marc.info/?l=debian-security&m=120343592917055&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9706 RedHat Security Advisories: RHSA-2008:0194 http://www.redhat.com/support/errata/RHSA-2008-0194.html http://secunia.com/advisories/29081 http://secunia.com/advisories/29129 http://secunia.com/advisories/29136 http://secunia.com/advisories/29172 http://secunia.com/advisories/29963 http://secunia.com/advisories/34642 http://secunia.com/advisories/35031 SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html