CVE

Id
49662  
CVE No.
CVE-2011-1750  
Status
Candidate  
Description
Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
539232 49662 CVE-2011-1750 MLIST:[Qemu-devel] 20110330 Re: virtio-blk.c handling of i/o which is not a 512 multiple  View
539233 49662 CVE-2011-1750 URL:http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03019.html  View
539234 49662 CVE-2011-1750 MLIST:[Qemu-devel] 20110330 virtio-blk.c handling of i/o which is not a 512 multiple  View
539235 49662 CVE-2011-1750 URL:http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03015.html  View
539236 49662 CVE-2011-1750 CONFIRM:http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commitdiff;h=52c050236eaa4f0b5e1d160cd66dc18106445c4d  View
539237 49662 CVE-2011-1750 DEBIAN:DSA-2230  View
539238 49662 CVE-2011-1750 URL:https://www.debian.org/security/2011/dsa-2230  View
539239 49662 CVE-2011-1750 FEDORA:FEDORA-2012-8604  View
539240 49662 CVE-2011-1750 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html  View
539241 49662 CVE-2011-1750 REDHAT:RHSA-2011:0534  View
539242 49662 CVE-2011-1750 URL:http://rhn.redhat.com/errata/RHSA-2011-0534.html  View
539243 49662 CVE-2011-1750 SUSE:SUSE-SU-2011:0533  View
539244 49662 CVE-2011-1750 URL:https://hermes.opensuse.org/messages/8572547  View
539245 49662 CVE-2011-1750 SUSE:openSUSE-SU-2011:0510  View
539246 49662 CVE-2011-1750 URL:http://lists.opensuse.org/opensuse-updates/2011-05/msg00043.html  View
539247 49662 CVE-2011-1750 UBUNTU:USN-1145-1  View
539248 49662 CVE-2011-1750 URL:https://www.ubuntu.com/usn/USN-1145-1/  View
539249 49662 CVE-2011-1750 OSVDB:73756  View
539250 49662 CVE-2011-1750 URL:http://www.osvdb.org/73756  View
539251 49662 CVE-2011-1750 SECUNIA:44132  View
539252 49662 CVE-2011-1750 URL:http://secunia.com/advisories/44132  View
539253 49662 CVE-2011-1750 SECUNIA:44393  View
539254 49662 CVE-2011-1750 URL:http://secunia.com/advisories/44393  View
539255 49662 CVE-2011-1750 SECUNIA:44658  View
539256 49662 CVE-2011-1750 URL:http://secunia.com/advisories/44658  View
539257 49662 CVE-2011-1750 SECUNIA:44660  View
539258 49662 CVE-2011-1750 URL:http://secunia.com/advisories/44660  View
539259 49662 CVE-2011-1750 SECUNIA:44900  View
539260 49662 CVE-2011-1750 URL:http://secunia.com/advisories/44900  View
539261 49662 CVE-2011-1750 XF:kvm-virtioblk-priv-escalation(67062)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34299 JVNDB-2011-004541 jabberd2 におけるサービス運用妨害 (DoS) の脆弱性 jabberd2 は、エンティティ拡張の間に再帰を検知しないため、サービス運用妨害 (メモリおよび CPU 消費) の脆弱性が存在します。 CVE-2011-1755 49662 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004541.html  View