CVEvulnerability

CVE-2011-1750

7.4 HIGH Published 2012-06-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.4 HIGH — AV:A/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Affected configurations

• qemu qemu 0.14.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References