Lucene search

[email protected]CVE-2011-2527

HistoryJun 21, 2012 - 3:55 p.m.

CVE-2011-2527

2012-06-2115:55:09

CWE-264

[email protected]

web.nvd.nist.gov

qemu

cve-2011-2527

privilege escalation

vulnerability

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.001

Percentile

28.1%

JSON

The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.

Affected configurations

NVD

Node

qemuqemuRange≤0.14.0

qemuqemuMatch0.1.0

qemuqemuMatch0.1.1

qemuqemuMatch0.1.2

qemuqemuMatch0.1.3

qemuqemuMatch0.1.4

qemuqemuMatch0.1.5

qemuqemuMatch0.1.6

qemuqemuMatch0.2.0

qemuqemuMatch0.3.0

qemuqemuMatch0.4.0

qemuqemuMatch0.4.1

qemuqemuMatch0.4.2

qemuqemuMatch0.4.3

qemuqemuMatch0.6.0

qemuqemuMatch0.6.1

qemuqemuMatch0.7.0

qemuqemuMatch0.7.1

qemuqemuMatch0.7.2

qemuqemuMatch0.8.0

qemuqemuMatch0.8.1

qemuqemuMatch0.8.2

qemuqemuMatch0.9.0

qemuqemuMatch0.9.1

qemuqemuMatch0.9.1-5

qemuqemuMatch0.10.0

qemuqemuMatch0.10.1

qemuqemuMatch0.10.2

qemuqemuMatch0.10.3

qemuqemuMatch0.10.4

qemuqemuMatch0.10.5

qemuqemuMatch0.10.6

qemuqemuMatch0.11.0

qemuqemuMatch0.11.0rc0

qemuqemuMatch0.11.0rc1

qemuqemuMatch0.11.0rc2

qemuqemuMatch0.11.0-rc0

qemuqemuMatch0.11.0-rc1

qemuqemuMatch0.11.0-rc2

qemuqemuMatch0.11.1

qemuqemuMatch0.12.0

qemuqemuMatch0.12.0rc1

qemuqemuMatch0.12.0rc2

qemuqemuMatch0.12.1

qemuqemuMatch0.12.2

qemuqemuMatch0.12.3

qemuqemuMatch0.12.4

qemuqemuMatch0.12.5

qemuqemuMatch0.13.0

qemuqemuMatch0.13.0rc0

qemuqemuMatch0.13.0rc1

qemuqemuMatch0.14.0rc0

qemuqemuMatch0.14.0rc1

qemuqemuMatch0.14.0rc2

qemuqemuMatch0.14.1

qemuqemuMatch0.15.0rc1

qemuqemuMatch0.15.0rc2

VendorProductVersionCPE
qemuqemu0.13.0cpe:/a:qemu:qemu:0.13.0:rc0::
qemuqemu0.14.0cpe:/a:qemu:qemu:0.14.0:rc0::
qemuqemu0.1.5cpe:/a:qemu:qemu:0.1.5:::
qemuqemu0.4.1cpe:/a:qemu:qemu:0.4.1:::
qemuqemu0.15.0cpe:/a:qemu:qemu:0.15.0:rc2::
qemuqemu0.14.0cpe:/a:qemu:qemu:0.14.0:rc1::
qemuqemu0.12.1cpe:/a:qemu:qemu:0.12.1:::
qemuqemu0.4.2cpe:/a:qemu:qemu:0.4.2:::
qemuqemu0.10.5cpe:/a:qemu:qemu:0.10.5:::
qemuqemu0.1.4cpe:/a:qemu:qemu:0.1.4:::

Vendor	Product	Version	CPE
qemu	qemu	0.13.0	cpe:/a:qemu:qemu:0.13.0:rc0::
qemu	qemu	0.14.0	cpe:/a:qemu:qemu:0.14.0:rc0::
qemu	qemu	0.1.5	cpe:/a:qemu:qemu:0.1.5:::
qemu	qemu	0.4.1	cpe:/a:qemu:qemu:0.4.1:::
qemu	qemu	0.15.0	cpe:/a:qemu:qemu:0.15.0:rc2::
qemu	qemu	0.14.0	cpe:/a:qemu:qemu:0.14.0:rc1::
qemu	qemu	0.12.1	cpe:/a:qemu:qemu:0.12.1:::
qemu	qemu	0.4.2	cpe:/a:qemu:qemu:0.4.2:::
qemu	qemu	0.10.5	cpe:/a:qemu:qemu:0.10.5:::
qemu	qemu	0.1.4	cpe:/a:qemu:qemu:0.1.4:::