CVE-2011-2527
Fixed in a distro release EPSS <1%
The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | qemu-kvm | 0.12.5+dfsg-5+squeeze6 |
| Red Hat Enterprise Linux 6 | qemu-img | 2:0.12.1.2-2.209.el6 |
| Red Hat Enterprise Linux 6 | qemu-kvm | 2:0.12.1.2-2.209.el6 |
| Red Hat Enterprise Linux 6 | qemu-kvm-debuginfo | 2:0.12.1.2-2.209.el6 |
| Red Hat Enterprise Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.209.el6 |