Permissions, Privileges, and Access Controls in QEMU - CVE-2011-2527

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU43971

Permissions, Privileges, and Access Controls in QEMU - CVE-2011-2527

Published: June 21, 2012 / Updated: August 11, 2020


Vulnerability identifier: #VU43971
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-2527
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.


Affected software

QEMU
Ubuntu
qemu-kvm (Ubuntu package)
qemu-kvm-extras (Ubuntu package)
qemu-kvm-extras-static (Ubuntu package)

How to mitigate CVE-2011-2527

Install update from vendor's website.

qemu-kvm (Ubuntu package) - addressed in versions 0.12.3+noroms-0ubuntu9.15, 0.12.5+noroms-0ubuntu7.10, 0.14.0+noroms-0ubuntu4.4
qemu-kvm-extras (Ubuntu package) - addressed in versions 0.12.3+noroms-0ubuntu9.15, 0.12.5+noroms-0ubuntu7.10
qemu-kvm-extras-static (Ubuntu package) - addressed in versions 0.12.3+noroms-0ubuntu9.15, 0.12.5+noroms-0ubuntu7.10

External References

Related Security Bulletins