NVD

Id
9301  
Name
CVE-2011-2527  
Description
The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-06-21  
Modified Date
2016-12-07  
Seq
2011-2527  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53266 9301 CVE-2011-2527 FEDORA-2012-8604  View
53267 9301 CVE-2011-2527 openSUSE-SU-2012:0207  View
53268 9301 CVE-2011-2527 RHSA-2011:1531  View
53269 9301 CVE-2011-2527 USN-1177-1  View
53270 9301 CVE-2011-2527 [oss-security] 20110712 Re: CVE Request: qemu -runas does not clear supplementary groups  View
53271 9301 CVE-2011-2527 [oss-security] 20110712 CVE Request: qemu -runas does not clear supplementary groups  View
53272 9301 CVE-2011-2527 48659  View
53273 9301 CVE-2011-2527 qemu-runas-priv-escalation(68539)  View
53274 9301 CVE-2011-2527 https://bugs.launchpad.net/qemu/+bug/807893  View
53275 9301 CVE-2011-2527 DSA-2282  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34807 JVNDB-2011-005049 Qemu の os-posix.c におけるホスト上の制限付きファイルにアクセスされる脆弱性 Qemu の os-posix.c 内の change_process_uid 関数は、-runas オプションが使用されている場合、グループ権限を適切に削除しないため、ホスト上の制限付きファイルへアクセスされる脆弱性が存在します。 CVE-2011-2527 50434 CVE-2011-2527 9301 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005049.html 2011-07-09 2012-06-25 View