CVE-2008-1945

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.

• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/32063Third Party Advisory
• http://secunia.com/advisories/32088Third Party Advisory
• http://secunia.com/advisories/34642Third Party Advisory
• http://secunia.com/advisories/35031Third Party Advisory
• http://secunia.com/advisories/35062Third Party Advisory
• http://www.debian.org/security/2009/dsa-1799Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:162Third Party Advisory
• http://www.securityfocus.com/bid/30604Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020959Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-776-1Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44269Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9905Third Party Advisory
• https://rhn.redhat.com/errata/RHSA-2008-0892.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/32063Third Party Advisory
• http://secunia.com/advisories/32088Third Party Advisory
• http://secunia.com/advisories/34642Third Party Advisory
• http://secunia.com/advisories/35031Third Party Advisory
• http://secunia.com/advisories/35062Third Party Advisory
• http://www.debian.org/security/2009/dsa-1799Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:162Third Party Advisory
• http://www.securityfocus.com/bid/30604Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020959Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-776-1Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44269Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9905Third Party Advisory
• https://rhn.redhat.com/errata/RHSA-2008-0892.htmlThird Party Advisory

Published

Aug 8, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1939Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1…
• CVE-2008-1940The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 …
• CVE-2008-1941Cross-site scripting (XSS) vulnerability in the profile upda…
• CVE-2008-1942Foxit Reader 2.2 allows remote attackers to cause a denial o…
• CVE-2008-1943Buffer overflow in the backend of XenSource Xen Para Virtual…
• CVE-2008-1944Buffer overflow in the backend framebuffer of XenSource Xen …
• CVE-2008-1946The default configuration of su in /etc/pam.d/su in GNU core…
• CVE-2008-1947Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.…
• CVE-2008-1948The _gnutls_server_name_recv_params function in lib/ext_serv…
• CVE-2008-1949The _gnutls_recv_client_kx_message function in lib/gnutls_kx…
• CVE-2008-1950Integer signedness error in the _gnutls_ciphertext2compresse…
• CVE-2008-1951Untrusted search path vulnerability in a certain Red Hat bui…