CVE-2011-1750
Fixed in a distro release EPSS <1%
Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | qemu-kvm | 0.12.5+dfsg-5+squeeze1 |
| Red Hat Enterprise Linux 6 | qemu-img | 2:0.12.1.2-2.160.el6 |
| Red Hat Enterprise Linux 6 | qemu-kvm | 2:0.12.1.2-2.160.el6 |
| Red Hat Enterprise Linux 6 | qemu-kvm-debuginfo | 2:0.12.1.2-2.160.el6 |
| Red Hat Enterprise Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.160.el6 |