Privilege Escalation

2020-04-1000:59:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

26.0%

JSON

qemu-kvm is vulnerable to privilege escalation. The vulnerability exists as it was found that the virtio subsystem in qemu-kvm did not properly validate virtqueue in and out requests from the guest. A privileged guest user could use this flaw to trigger a buffer overflow, allowing them to crash the guest (denial of service) or, possibly, escalate their privileges on the host.

CPENameOperatorVersion
qemu-kvmeq0.12.1.2__2.113.el6_0.3
qemu-kvmeq0.12.1.2__2.113.el6
qemu-kvmeq0.12.1.2__2.113.el6_0.8
qemu-kvmeq0.12.1.2__2.113.el6_0.6
qemu-kvmeq0.12.1.2__2.113.el6_0.3
qemu-kvmeq0.12.1.2__2.113.el6
qemu-kvmeq0.12.1.2__2.113.el6_0.8
qemu-kvmeq0.12.1.2__2.113.el6_0.6

Name	Operator	Version
qemu-kvm	eq	0.12.1.2__2.113.el6_0.3
qemu-kvm	eq	0.12.1.2__2.113.el6
qemu-kvm	eq	0.12.1.2__2.113.el6_0.8
qemu-kvm	eq	0.12.1.2__2.113.el6_0.6
qemu-kvm	eq	0.12.1.2__2.113.el6_0.3
qemu-kvm	eq	0.12.1.2__2.113.el6
qemu-kvm	eq	0.12.1.2__2.113.el6_0.8
qemu-kvm	eq	0.12.1.2__2.113.el6_0.6