CVE-2011-3346
EUVD-2011-331001.04.2014, 06:35
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| qemu | qemu | 𝑥 ≤ 0.15.1 |
| qemu | qemu | 0.15.0:rc1 |
| qemu | qemu | 0.15.0:rc2 |
| xen | xen | - |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qemu-kvm |
| ||||||||||||||
| xen |
| ||||||||||||||
| xen-3.1 |
| ||||||||||||||
| xen-3.2 |
| ||||||||||||||
| xen-3.3 |
|
Common Weakness Enumeration
References