CVE-2011-2511: Integer Overflow
Published Aug 10, 2011
·Updated
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
Affected Software
58 affected components
redhat libvirt=0.4.1
redhat libvirt=0.8.6
redhat libvirt=0.4.5
redhat libvirt=0.7.5
redhat libvirt=0.0.6
redhat libvirt=0.5.0
redhat libvirt=0.7.2
redhat libvirt=0.1.1
redhat libvirt=0.0.3
redhat libvirt=0.1.7
redhat libvirt=0.0.1
redhat libvirt=0.2.0
redhat libvirt=0.7.4
redhat libvirt=0.4.4
redhat libvirt=0.3.3
redhat libvirt=0.0.2
redhat libvirt=0.1.8
redhat libvirt=0.3.0
redhat libvirt=0.1.3
redhat libvirt=0.1.9
redhat libvirt=0.4.2
redhat libvirt=0.8.5
redhat libvirt=0.8.7
redhat libvirt=0.7.7
redhat libvirt=0.6.4
redhat libvirt=0.3.1
redhat libvirt=0.1.6
redhat libvirt=0.9.0
redhat libvirt=0.6.5
redhat libvirt=0.8.2
redhat libvirt=0.8.1
redhat libvirt=0.2.2
redhat libvirt=0.8.3
redhat libvirt=0.7.1
redhat libvirt=0.2.3
redhat libvirt=0.0.4
redhat libvirt=0.1.0
redhat libvirt=0.6.2
redhat libvirt=0.8.8
redhat libvirt=0.6.3
redhat libvirt=0.4.3
redhat libvirt=0.5.1
redhat libvirt=0.7.6
redhat libvirt=0.7.3
redhat libvirt=0.6.1
redhat libvirt=0.1.4
redhat libvirt=0.8.4
redhat libvirt<=0.9.2
redhat libvirt=0.9.1
redhat libvirt=0.4.6
redhat libvirt=0.1.5
redhat libvirt=0.7.0
redhat libvirt=0.4.0
redhat libvirt=0.0.5
redhat libvirt=0.2.1
redhat libvirt=0.6.0
redhat libvirt=0.8.0
redhat libvirt=0.3.2
Remediation
Patch Available
Event History
Aug 10, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2511?
CVE-2011-2511 has a high severity due to its potential to cause a denial of service and possibly execute arbitrary code.
2
Who is affected by CVE-2011-2511?
CVE-2011-2511 affects remote authenticated users of the libvirt software versions before 0.9.3.
3
How do I fix CVE-2011-2511?
To fix CVE-2011-2511, upgrade libvirt to version 0.9.3 or later.
4
What type of attack does CVE-2011-2511 allow?
CVE-2011-2511 may allow attackers to cause a denial of service and potentially gain control over the affected system.
5
Is my libvirt installation vulnerable to CVE-2011-2511?
If you are using a version of libvirt prior to 0.9.3, your installation is vulnerable to CVE-2011-2511.