Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
QEMU drive_init()函数绕过安全限制漏洞
Vulnerability Description
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。 QEMU的vl.c文件中drive_init()函数根据磁盘头中的数据判断磁盘的格式，这允许guest系统中的恶意用户通过向原始格式磁盘镜像中写入伪造的头绕过限制读取主机系统上的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A