CVE-2011-4111

2014-02-2615:55:08

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

6.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

EPSS

0.051

Percentile

93.0%

JSON

Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.

OSVersionArchitecturePackageVersionFilename
Debian12allqemu< 0.15.1+dfsg-2qemu_0.15.1+dfsg-2_all.deb
Debian11allqemu< 0.15.1+dfsg-2qemu_0.15.1+dfsg-2_all.deb
Debian999allqemu< 0.15.1+dfsg-2qemu_0.15.1+dfsg-2_all.deb
Debian13allqemu< 0.15.1+dfsg-2qemu_0.15.1+dfsg-2_all.deb
Debian12allxen< 4.4.0-1xen_4.4.0-1_all.deb
Debian11allxen< 4.4.0-1xen_4.4.0-1_all.deb
Debian999allxen< 4.4.0-1xen_4.4.0-1_all.deb
Debian13allxen< 4.4.0-1xen_4.4.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	qemu	< 0.15.1+dfsg-2	qemu_0.15.1+dfsg-2_all.deb
Debian	11	all	qemu	< 0.15.1+dfsg-2	qemu_0.15.1+dfsg-2_all.deb
Debian	999	all	qemu	< 0.15.1+dfsg-2	qemu_0.15.1+dfsg-2_all.deb
Debian	13	all	qemu	< 0.15.1+dfsg-2	qemu_0.15.1+dfsg-2_all.deb
Debian	12	all	xen	< 4.4.0-1	xen_4.4.0-1_all.deb
Debian	11	all	xen	< 4.4.0-1	xen_4.4.0-1_all.deb
Debian	999	all	xen	< 4.4.0-1	xen_4.4.0-1_all.deb
Debian	13	all	xen	< 4.4.0-1	xen_4.4.0-1_all.deb