[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96125

 
 

909

 
 

78020

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-1750

Date: (C)2012-06-21   (M)2017-08-18
 
CVSS Score: 7.4Access Vector: ADJACENT_NETWORK
Exploitability Subscore: 4.4Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: SINGLE_INSTANCE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Reference:
SECUNIA-44132
SECUNIA-44393
SECUNIA-44658
SECUNIA-44660
SECUNIA-44900
OSVDB-73756
DSA-2230
FEDORA-2012-8604
RHSA-2011:0534
SUSE-SU-2011:0533
USN-1145-1
http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03019.html
http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03015.html
http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commitdiff;h=52c050236eaa4f0b5e1d160cd66dc18106445c4d
kvm-virtioblk-priv-escalation(67062)
openSUSE-SU-2011:0510

CPE    1
cpe:/a:qemu:qemu:0.14.0
CWE    1
CWE-119
OVAL    4
oval:org.secpod.oval:def:600242
oval:org.secpod.oval:def:500165
oval:org.secpod.oval:def:700527
oval:org.secpod.oval:def:103863
...

© 2013 SecPod Technologies