Lucene search

K
cve[email protected]CVE-2011-4111
HistoryFeb 26, 2014 - 3:55 p.m.

CVE-2011-4111

2014-02-2615:55:08
CWE-119
web.nvd.nist.gov
27
cve-2011-4111
buffer overflow
qemu
security vulnerability
denial of service
remote code execution
nvd

6.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.051 Low

EPSS

Percentile

93.0%

Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.

Affected configurations

NVD
Node
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linux_server_supplementaryMatch6.1.z
Node
qemuqemuRange0.15.1
OR
qemuqemuMatch0.15.0
OR
qemuqemuMatch0.15.0rc1
OR
qemuqemuMatch0.15.0rc2
OR
qemuqemuMatch1.0
OR
qemuqemuMatch1.0rc1
OR
qemuqemuMatch1.0rc2
OR
qemuqemuMatch1.0rc3

6.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.051 Low

EPSS

Percentile

93.0%