CVE-2011-2511

Description

Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.

Scores

Weaknesses (CWE)

• CWE-189

European references

• ENISA EUVD · EUVD-2011-2496
• GCVE · GCVE-0-2011-2511

CERT-FR advisories

• CERTFR-2022-AVI-267 — Multiples vulnérabilités dans Juniper Networks Junos Space · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:* ≤ 0.9.2
• cpe:2.3:a:redhat:libvirt:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.4:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.5:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.6:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.7:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.8:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.1.9:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.2.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.3.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.3.1:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.3.2:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.3.3:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.4.3:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.4.4:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.4.5:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.4.6:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.5.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.5.1:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.6.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.6.1:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.6.2:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.6.3:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.6.4:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.6.5:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:libvirt:0.7.0:*:*:*:*:*:*:*
• +18 more

Affected products

References

• http://libvirt.org/news.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68271
• http://secunia.com/advisories/45441
• http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html
• http://secunia.com/advisories/45446
• http://www.openwall.com/lists/oss-security/2011/06/28/9
• http://www.redhat.com/support/errata/RHSA-2011-1197.html
• http://www.redhat.com/support/errata/RHSA-2011-1019.html
• http://www.ubuntu.com/usn/USN-1180-1
• http://secunia.com/advisories/45375
• https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html
• http://www.securitytracker.com/id?1025822
• http://www.debian.org/security/2011/dsa-2280
• https://hermes.opensuse.org/messages/10027908
• http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062855.html

Sources