Buffer overflow in QEMU - CVE-2011-1750

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU43972

Buffer overflow in QEMU - CVE-2011-1750

Published: June 21, 2012 / Updated: August 11, 2020


Vulnerability identifier: #VU43972
CSH Severity: Medium
CVSS v4: 8.5 [CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-1750
CWE-ID: CWE-119
Exploitation vector: Adjecent network
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote #AU# to execute arbitrary code.

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.


Affected software

QEMU
Ubuntu
qemu-kvm (Ubuntu package)
qemu-kvm-extras (Ubuntu package)
qemu-kvm-extras-static (Ubuntu package)

How to mitigate CVE-2011-1750

Install update from vendor's website.

qemu-kvm (Ubuntu package) - addressed in versions 0.12.3+noroms-0ubuntu9.9, 0.12.5+noroms-0ubuntu7.5, 0.14.0+noroms-0ubuntu4.1
qemu-kvm-extras (Ubuntu package) - addressed in versions 0.12.3+noroms-0ubuntu9.9, 0.12.5+noroms-0ubuntu7.5
qemu-kvm-extras-static (Ubuntu package) - addressed in versions 0.12.3+noroms-0ubuntu9.9, 0.12.5+noroms-0ubuntu7.5

External References

Related Security Bulletins