CVE-2008-4539

KVM < 81 and QEMU < 0.10.0 - Heap-Based Buffer Overflow in Cirrus VGA via VNC Console

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.

References (20)

Core 20
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35062
Mailing List mailing-list x_refsource_mlist
http://www.mail-archive.com/cvs-all%40freebsd.org/msg129730.html
Third Party Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25073
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34642
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=466890
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-776-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33350
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=448525
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/47736
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=237342
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29129
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1799
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35031

Scores

EPSS 0.0005
EPSS Percentile 14.9%

Details

CWE
CWE-119
Status published
Products (6)
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 8.10
debian/debian_linux 4.0
debian/debian_linux 5.0
kvm_qumranet/kvm < 81
qemu/qemu < 0.10.0
Published Dec 29, 2008
Tracked Since Feb 18, 2026