CVE-2011-1750: qemu

Vulnerability summary

CVE-2011-1750 is a high (CVSS 7.4) vulnerability in qemu. EPSS estimates a 0.71% chance of exploitation in the next 30 days, higher than 53.5% of scored vulnerabilities.

Timeline

1. 21-06-2012
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.