CVE-2011-2512

Published: Jun 21, 2012Modified: Apr 29, 2026

5.8

Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 6.5 / Impact: 6.4

Source: NVD

Description

The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed comparison.

Affected (2)

Products: Kvm Group: Qemu Kvm

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Kvm Group Qemu Kvm	Up to 0.14.0
Kvm Group Qemu Kvm	Version 0.12

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (28)

http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=7157e2e23e89adcd436caeab31fdd6b47eded377

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00007.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-0919.html

Source: secalert@redhat.com

http://secunia.com/advisories/44458

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/44648

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45158

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45170

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45301

Source: secalert@redhat.com

Vendor Advisory

http://ubuntu.com/usn/usn-1165-1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/06/28/13

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2011/06/29/15

Source: secalert@redhat.com

Patch

http://www.osvdb.org/74751

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/9605323

Source: secalert@redhat.com

https://www.debian.org/security/2011/dsa-2270

Source: secalert@redhat.com

http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=7157e2e23e89adcd436caeab31fdd6b47eded377

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2011-0919.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44458

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/44648

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/45158

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/45170

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/45301

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://ubuntu.com/usn/usn-1165-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/06/28/13

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openwall.com/lists/oss-security/2011/06/29/15

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.osvdb.org/74751

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/9605323

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2011/dsa-2270

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.