NVD

Id
8639  
Name
CVE-2011-1751  
Description
The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arbitrary code by sending a crafted value to the 0xae08 (PCI_EJ_BASE) I/O port, which leads to a use-after-free related to "active qemu timers."  
Reject
 
CVSS Version
2  
CVSS Score
7.4  
Severity
High  
CVSS Base Score
7.4  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-06-21  
Modified Date
2016-12-07  
Seq
2011-1751  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
49832 8639 CVE-2011-1751 http://blog.nelhage.com/2011/08/breaking-out-of-kvm/  View
49833 8639 CVE-2011-1751 http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=505597e4476a6bc219d0ec1362b760d71cb4fdca  View
49834 8639 CVE-2011-1751 [Qemu-devel] 20110519 [PATCH] Ignore pci unplug requests for unpluggable devices  View
49835 8639 CVE-2011-1751 openSUSE-SU-2011:0510  View
49836 8639 CVE-2011-1751 RHSA-2011:0534  View
49837 8639 CVE-2011-1751 [oss-security] 20110519 CVE-2011-1751 qemu: acpi_piix4: missing hotplug check during device removal  View
49838 8639 CVE-2011-1751 47927  View
49839 8639 CVE-2011-1751 https://bugzilla.redhat.com/show_bug.cgi?id=699773  View
49840 8639 CVE-2011-1751 https://github.com/nelhage/virtunoid  View
49841 8639 CVE-2011-1751 SUSE-SU-2011:0533  View
49842 8639 CVE-2011-1751 USN-1145-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27111 JVNDB-2012-002818 qemu-kvm の pciej_write 関数におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性 qemu-kvm の PIIX4 Power Management エミュレーションにおける hw/acpi_piix4.c 内の pciej_write 関数は、PCI-ISA ブリッジが取り外される前に、デバイスに対するホットプラグの対応の有無を確認しないため、サービス運用妨害 (ゲストクラッシュ) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2011-1751 49658 CVE-2011-1751 8639 7.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002818.html 2012-06-21 2012-06-22 View