CVE-2011-2212: Buffer Overflow
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."
Other sources
It was found that virtio subsystem in qemu-kvm did not properly validate virtqueue in and out requests from the guest. A privileged guest user could use this flaw to cause buffer overflow, causing the guest to crash (denial of service) or, possibly, resulting in the privileged guest user escalating their privileges on the host.
Acknowledgements:
Red Hat would like to thank Nelson Elhage for reporting this issue.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2212?
CVE-2011-2212 has a moderate severity level due to its potential for causing denial of service or privilege escalation.
How do I fix CVE-2011-2212?
To fix CVE-2011-2212, update your QEMU-KVM to version 0.14.1 or later which addresses the buffer overflow vulnerability.
Who is affected by CVE-2011-2212?
CVE-2011-2212 affects privileged guest users in systems running QEMU-KVM versions 0.14.0 and earlier.
What type of vulnerability is CVE-2011-2212?
CVE-2011-2212 is classified as a buffer overflow vulnerability within the virtio subsystem of QEMU-KVM.
What are the potential consequences of CVE-2011-2212?
The potential consequences of CVE-2011-2212 include denial of service attacks resulting in guest crashes or unauthorized privilege escalation.