CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite...

7.2 HighFix available

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Exploit likelihood

0.49%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Record: CVE-2008-4553
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Record: CVE-2008-4553
Updated: 2026-11-02

EUVDEUVD-2008-4534 No score

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Record: EUVD-2008-4534
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5642-4rj6-w59m No score

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite...

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Record: GHSA-5642-4rj6-w59m
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Record: CVE-2008-4553
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-4553 No score

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Record: DEBIAN-CVE-2008-4553
Updated: 2026-11-02

Affected products

qemu

Affected packages

Affected packages
Package	Affected	Fixed
`qemu` Debian:12	before 0.9.1-6	0.9.1-6
`qemu` Debian:13	before 0.9.1-6	0.9.1-6
`qemu` Debian:14	before 0.9.1-6	0.9.1-6
`qemu` Debian:4.0	before 0.8.2-4etch2, plus listed versions 0.8.2-40.8.2-4etch1	0.8.2-4etch2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4553 is a high vulnerability (CVSS 7.2) in Qemu, published October 15, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in qemu 0.9.1-6.

References

Show 9 moreShow less