SB2012062104 - Multiple vulnerabilities in QEMU

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2012062104

SB2012062104 - Multiple vulnerabilities in QEMU

Published: June 21, 2012 Updated: August 11, 2020

Security Bulletin ID SB2012062104
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Adjecent network
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Buffer overflow (CVE-ID: CVE-2011-2212)

The vulnerability allows a remote #AU# to execute arbitrary code.

Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."


2) Buffer overflow (CVE-ID: CVE-2011-1750)

The vulnerability allows a remote #AU# to execute arbitrary code.

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.


Remediation

Install update from vendor's website.

References