| Vulnerability Name: | CVE-2011-1750 (CCN-67062) | ||||||||||||||||||||||||||||
| Assigned: | 2011-03-30 | ||||||||||||||||||||||||||||
| Published: | 2011-03-30 | ||||||||||||||||||||||||||||
| Updated: | 2023-02-13 | ||||||||||||||||||||||||||||
| Summary: | Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned. | ||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||||||||||
| CVSS v2 Severity: | 7.4 High (CVSS v2 Vector: AV:A/AC:M/Au:S/C:C/I:C/A:C) 5.4 Medium (Temporal CVSS v2 Vector: AV:A/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.4 Medium (REDHAT Temporal CVSS v2 Vector: AV:A/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-122 | ||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||||||||||||||||||||||
| References: | Source: CCN Type: QEMU Web page QEMU Source: MITRE Type: CNA CVE-2011-1750 Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: QEMU GIT Repository QEMU Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: Qemu-devel virtio-blk.c handling of i/o which is not a 512 multiple Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: RHSA-2011-0534 Important: qemu-kvm security, bug fix, and enhancement update Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: SA44132 KVM qemu-kvm virtio-blk Driver Buffer Overflow Vulnerabilities Source: DEBIAN Type: DSA-2230 qemu-kvm -- several vulnerabilities Source: CCN Type: OSVDB ID: 73756 KVM qemu-kvm hw/virtio-blk.c Multiple Function Local DoS Source: CCN Type: BID-47546 QEMU KVM 'virtio-blk' Driver Local Privilege Escalation Vulnerability Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: XF Type: UNKNOWN kvm-virtioblk-priv-escalation(67062) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com | ||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration RedHat 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||