Lucene search

[email protected]CVE-2011-2212

HistoryJun 21, 2012 - 3:55 p.m.

CVE-2011-2212

2012-06-2115:55:09

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-2212

buffer overflow

qemu-kvm

virtio subsystem

denial of service

guest crash

privilege escalation

7.4 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.2%

JSON

Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to “virtqueue in and out requests.”

Affected configurations

NVD

Node

qemuqemuRange≤0.14.0

qemuqemuMatch0.1.0

qemuqemuMatch0.1.1

qemuqemuMatch0.1.2

qemuqemuMatch0.1.3

qemuqemuMatch0.1.4

qemuqemuMatch0.1.5

qemuqemuMatch0.1.6

qemuqemuMatch0.2.0

qemuqemuMatch0.3.0

qemuqemuMatch0.4.0

qemuqemuMatch0.4.1

qemuqemuMatch0.4.2

qemuqemuMatch0.4.3

qemuqemuMatch0.5.0

qemuqemuMatch0.5.1

qemuqemuMatch0.5.2

qemuqemuMatch0.5.3

qemuqemuMatch0.5.4

qemuqemuMatch0.5.5

qemuqemuMatch0.6.0

qemuqemuMatch0.6.1

qemuqemuMatch0.7.0

qemuqemuMatch0.7.1

qemuqemuMatch0.7.2

qemuqemuMatch0.8.0

qemuqemuMatch0.8.1

qemuqemuMatch0.8.2

qemuqemuMatch0.9.0

qemuqemuMatch0.9.1

qemuqemuMatch0.9.1-5

qemuqemuMatch0.10.0

qemuqemuMatch0.10.1

qemuqemuMatch0.10.2

qemuqemuMatch0.10.3

qemuqemuMatch0.10.4

qemuqemuMatch0.10.5

qemuqemuMatch0.10.6

qemuqemuMatch0.11.0

qemuqemuMatch0.11.0rc0

qemuqemuMatch0.11.0rc1

qemuqemuMatch0.11.0rc2

qemuqemuMatch0.11.0-rc0

qemuqemuMatch0.11.0-rc1

qemuqemuMatch0.11.0-rc2

qemuqemuMatch0.11.1

qemuqemuMatch0.12.0

qemuqemuMatch0.12.0rc1

qemuqemuMatch0.12.0rc2

qemuqemuMatch0.12.1

qemuqemuMatch0.12.2

qemuqemuMatch0.12.3

qemuqemuMatch0.12.4

qemuqemuMatch0.12.5

qemuqemuMatch0.13.0

qemuqemuMatch0.13.0rc0

qemuqemuMatch0.13.0rc1

qemuqemuMatch0.14.0rc0

qemuqemuMatch0.14.0rc1

qemuqemuMatch0.14.0rc2

CPENameOperatorVersion
qemu:qemuqemule0.14.0
qemu:qemuqemueq0.1.0
qemu:qemuqemueq0.1.1
qemu:qemuqemueq0.1.2
qemu:qemuqemueq0.1.3
qemu:qemuqemueq0.1.4
qemu:qemuqemueq0.1.5
qemu:qemuqemueq0.1.6
qemu:qemuqemueq0.2.0
qemu:qemuqemueq0.3.0

CPE	Name	Operator	Version
qemu:qemu	qemu	le	0.14.0
qemu:qemu	qemu	eq	0.1.0
qemu:qemu	qemu	eq	0.1.1
qemu:qemu	qemu	eq	0.1.2
qemu:qemu	qemu	eq	0.1.3
qemu:qemu	qemu	eq	0.1.4
qemu:qemu	qemu	eq	0.1.5
qemu:qemu	qemu	eq	0.1.6
qemu:qemu	qemu	eq	0.2.0
qemu:qemu	qemu	eq	0.3.0