CVE-2011-2527: Low severity qemu vulnerability
Published Jun 21, 2012
·Updated
The changeprocessuid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
Affected Software
59 affected components
debian/kvm
debian/qemu-kvm
Qemu Qemu=0.12.2
Qemu Qemu=0.12.0-rc2
Qemu Qemu=0.1.6
Qemu Qemu=0.13.0-rc0
Qemu Qemu=0.4.2
Qemu Qemu=0.10.3
Qemu Qemu=0.11.0-rc1
Qemu Qemu=0.1.5
Qemu Qemu=0.13.0
Qemu Qemu=0.8.2
Qemu Qemu=0.11.0-rc1
Qemu Qemu=0.10.1
Qemu Qemu=0.9.0
Qemu Qemu=0.7.2
Qemu Qemu=0.11.0-rc2
Qemu Qemu=0.12.5
Qemu Qemu=0.11.0
Qemu Qemu=0.1.3
Qemu Qemu=0.14.0-rc0
Qemu Qemu=0.12.0-rc1
Qemu Qemu=0.11.1
Qemu Qemu=0.7.1
Qemu Qemu=0.9.1-5
Qemu Qemu=0.13.0-rc1
Qemu Qemu=0.15.0-rc1
Qemu Qemu<=0.14.0
Qemu Qemu=0.12.0
Qemu Qemu=0.14.1
Qemu Qemu=0.8.1
Qemu Qemu=0.11.0-rc2
Qemu Qemu=0.10.0
Qemu Qemu=0.4.1
Qemu Qemu=0.12.3
Qemu Qemu=0.1.1
Qemu Qemu=0.7.0
Qemu Qemu=0.11.0-rc0
Qemu Qemu=0.1.4
Qemu Qemu=0.9.1
Qemu Qemu=0.6.0
Qemu Qemu=0.6.1
Qemu Qemu=0.14.0-rc2
Qemu Qemu=0.10.6
Qemu Qemu=0.14.0-rc1
Qemu Qemu=0.11.0-rc0
Qemu Qemu=0.4.3
Qemu Qemu=0.1.2
Qemu Qemu=0.12.4
Qemu Qemu=0.10.5
Qemu Qemu=0.10.4
Qemu Qemu=0.10.2
Qemu Qemu=0.15.0-rc2
Qemu Qemu=0.12.1
Qemu Qemu=0.8.0
Qemu Qemu=0.1.0
Qemu Qemu=0.2.0
Qemu Qemu=0.3.0
Qemu Qemu=0.4.0
Event History
Jun 21, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2527?
CVE-2011-2527 is considered a moderate vulnerability, allowing local guest users to access restricted files on the host.
2
How do I fix CVE-2011-2527?
To fix CVE-2011-2527, upgrade to Qemu version 0.14.1 or later, which addresses the privilege dropping issue.
3
What systems are affected by CVE-2011-2527?
CVE-2011-2527 affects Qemu versions up to and including 0.14.0, particularly in KVM setups.
4
Can I exploit CVE-2011-2527 remotely?
No, CVE-2011-2527 requires local access to exploit the vulnerability.
5
What is the impact of CVE-2011-2527 on host security?
The impact of CVE-2011-2527 is that it allows unauthorized access to sensitive files on the host system, potentially compromising host security.