CVE-2011-2511
Fixed in a distro release EPSS 4%
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
Products: redhat libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.9.2-7 |
| Debian 13 | libvirt | 0.9.2-7 |
| Debian 14 | libvirt | 0.9.2-7 |
| Debian 5.0 | libvirt | 0.4.6-10+lenny2 |
| Debian 6.0 | libvirt | 0.8.3-5+squeeze2 |
| Red Hat Enterprise Linux 6 | libvirt | 0:0.8.7-18.el6_1.1 |
| Red Hat Enterprise Linux 6 | libvirt-client | 0:0.8.7-18.el6_1.1 |
| Red Hat Enterprise Linux 6 | libvirt-debuginfo | 0:0.8.7-18.el6_1.1 |
| Red Hat Enterprise Linux 6 | libvirt-devel | 0:0.8.7-18.el6_1.1 |
| Red Hat Enterprise Linux 6 | libvirt-python | 0:0.8.7-18.el6_1.1 |
| Red Hat rhel virtualization 5 | libvirt | 0:0.8.2-22.el5 |
| Red Hat rhel virtualization 5 | libvirt-debuginfo | 0:0.8.2-22.el5 |
| Red Hat rhel virtualization 5 | libvirt-devel | 0:0.8.2-22.el5 |
| Red Hat rhel virtualization 5 | libvirt-python | 0:0.8.2-22.el5 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |