CVE-2011-2212
Fixed in a distro release EPSS <1%
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | qemu-kvm | 0.12.5+dfsg-5+squeeze6 |
| Red Hat Enterprise Linux 6 | qemu-img | 2:0.12.1.2-2.160.el6_1.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm | 2:0.12.1.2-2.160.el6_1.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm-debuginfo | 2:0.12.1.2-2.160.el6_1.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.160.el6_1.2 |