CVE-2011-2511

EUVD-2011-2496
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
redhatlibvirt
𝑥
≤ 0.9.2
redhatlibvirt
0.0.1
redhatlibvirt
0.0.2
redhatlibvirt
0.0.3
redhatlibvirt
0.0.4
redhatlibvirt
0.0.5
redhatlibvirt
0.0.6
redhatlibvirt
0.1.0
redhatlibvirt
0.1.1
redhatlibvirt
0.1.3
redhatlibvirt
0.1.4
redhatlibvirt
0.1.5
redhatlibvirt
0.1.6
redhatlibvirt
0.1.7
redhatlibvirt
0.1.8
redhatlibvirt
0.1.9
redhatlibvirt
0.2.0
redhatlibvirt
0.2.1
redhatlibvirt
0.2.2
redhatlibvirt
0.2.3
redhatlibvirt
0.3.0
redhatlibvirt
0.3.1
redhatlibvirt
0.3.2
redhatlibvirt
0.3.3
redhatlibvirt
0.4.0
redhatlibvirt
0.4.1
redhatlibvirt
0.4.2
redhatlibvirt
0.4.3
redhatlibvirt
0.4.4
redhatlibvirt
0.4.5
redhatlibvirt
0.4.6
redhatlibvirt
0.5.0
redhatlibvirt
0.5.1
redhatlibvirt
0.6.0
redhatlibvirt
0.6.1
redhatlibvirt
0.6.2
redhatlibvirt
0.6.3
redhatlibvirt
0.6.4
redhatlibvirt
0.6.5
redhatlibvirt
0.7.0
redhatlibvirt
0.7.1
redhatlibvirt
0.7.2
redhatlibvirt
0.7.3
redhatlibvirt
0.7.4
redhatlibvirt
0.7.5
redhatlibvirt
0.7.6
redhatlibvirt
0.7.7
redhatlibvirt
0.8.0
redhatlibvirt
0.8.1
redhatlibvirt
0.8.2
redhatlibvirt
0.8.3
redhatlibvirt
0.8.4
redhatlibvirt
0.8.5
redhatlibvirt
0.8.6
redhatlibvirt
0.8.7
redhatlibvirt
0.8.8
redhatlibvirt
0.9.0
redhatlibvirt
0.9.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libvirt
bookworm
9.0.0-4+deb12u1
fixed
bullseye
7.0.0-3+deb11u3
fixed
sid
10.9.0-1
fixed
trixie
10.9.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libvirt
hardy
ignored
lucid
Fixed 0.7.5-5ubuntu27.16
released
maverick
Fixed 0.8.3-1ubuntu19.1
released
natty
Fixed 0.8.8-1ubuntu6.5
released
Common Weakness Enumeration
References
http://libvirt.org/news.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062855.html
http://secunia.com/advisories/45375
http://secunia.com/advisories/45441
http://secunia.com/advisories/45446
http://www.debian.org/security/2011/dsa-2280
http://www.openwall.com/lists/oss-security/2011/06/28/9
http://www.redhat.com/support/errata/RHSA-2011-1019.html
http://www.redhat.com/support/errata/RHSA-2011-1197.html
http://www.securitytracker.com/id?1025822
http://www.ubuntu.com/usn/USN-1180-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/68271
https://hermes.opensuse.org/messages/10027908
https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html
http://libvirt.org/news.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062855.html
http://secunia.com/advisories/45375
http://secunia.com/advisories/45441
http://secunia.com/advisories/45446
http://www.debian.org/security/2011/dsa-2280
http://www.openwall.com/lists/oss-security/2011/06/28/9
http://www.redhat.com/support/errata/RHSA-2011-1019.html
http://www.redhat.com/support/errata/RHSA-2011-1197.html
http://www.securitytracker.com/id?1025822
http://www.ubuntu.com/usn/USN-1180-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/68271
https://hermes.opensuse.org/messages/10027908
https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html