CVE-2011-1750: Buffer Overflow
It was found that virtio-blk driver in qemu-kvm did not properly validate read and write requests from the guest. A privileged guest user could use this flaw to cause heap corruption, causing the guest to crash (denial of service) or, possibly, resulting in the privileged guest user escalating their privileges on the host.
On RHEL ExecShield (glibc heap/memory checks) mitigates this issue.
References: http://www.spinics.net/lists/kvm/msg51877.html
Upstream commit: http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=52c050236eaa4f0b5e1d160cd66dc18106445c4d
Other sources
Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtioblkhandlewrite function or (2) read request to the virtioblkhandleread function that is not properly aligned.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1750?
CVE-2011-1750 has a high severity rating due to potential denial of service and possible privilege escalation.
How do I fix CVE-2011-1750?
To fix CVE-2011-1750, update qemu-kvm to version 0.14.1+dfsg-1 or later.
What systems are affected by CVE-2011-1750?
CVE-2011-1750 affects the virtio-blk driver in qemu-kvm on systems running specific versions of KVM and QEMU.
Can a non-privileged user exploit CVE-2011-1750?
No, only a privileged guest user can exploit CVE-2011-1750 to cause issues such as heap corruption.
What type of vulnerability is CVE-2011-1750?
CVE-2011-1750 is a vulnerability related to improper validation of read and write requests in the virtio-blk driver.