CVE-2011-3346
Fixed in a distro release EPSS <1%
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.
Products: qemu, redhat enterprise_linux, xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | xen | 0:3.0.3-132.el5_7.2 |
| Red Hat Enterprise Linux 5 | xen-debuginfo | 0:3.0.3-132.el5_7.2 |
| Red Hat Enterprise Linux 5 | xen-libs | 0:3.0.3-132.el5_7.2 |
| Red Hat rhel virtualization 5 | xen | 0:3.0.3-132.el5_7.2 |
| Red Hat rhel virtualization 5 | xen-debuginfo | 0:3.0.3-132.el5_7.2 |
| Red Hat rhel virtualization 5 | xen-devel | 0:3.0.3-132.el5_7.2 |