CVE-2011-4111: Buffer Overflow
A flaw was found in the way QEMU handled VSCATR messages when CCID card passthru device was used. A malicious client could use this flaw to crash the QEMU process or, potentially, escalate his privileges.
Other sources
Buffer overflow in the ccidcardvscardhandlemessage function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSCATR message.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4111?
CVE-2011-4111 has a high severity rating due to its potential for privilege escalation and crashing the QEMU process.
How do I fix CVE-2011-4111?
To fix CVE-2011-4111, update QEMU to a version that has patched the vulnerability.
What software is affected by CVE-2011-4111?
CVE-2011-4111 affects certain versions of QEMU and Red Hat Enterprise Linux, specifically those listed in the vulnerability details.
Can CVE-2011-4111 be exploited remotely?
Yes, CVE-2011-4111 can potentially be exploited by a malicious client to crash the QEMU process.
What is the nature of the flaw in CVE-2011-4111?
The flaw in CVE-2011-4111 is a buffer overflow in the ccid_card_vscard_handle_message function which can lead to crashes or privilege escalation.