Lucene search
RedhatCVE-2011-4111HistoryFeb 26, 2014 - 3:55 p.m.
CVE-2011-4111
2014-02-2615:55:08
CWE-119
redhat
web.nvd.nist.gov
44
cve-2011-4111
buffer overflow
qemu
security vulnerability
denial of service
remote code execution
nvd
CVSS2
6.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.051
Percentile
93.0%
Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.
Affected configurations
Node
redhatenterprise_linuxMatch6.0
ORredhatenterprise_linux_server_supplementaryMatch6.1.z
Node
qemuqemuRange≤0.15.1
ORqemuqemuMatch0.15.0
ORqemuqemuMatch0.15.0rc1
ORqemuqemuMatch0.15.0rc2
ORqemuqemuMatch1.0
ORqemuqemuMatch1.0rc1
ORqemuqemuMatch1.0rc2
ORqemuqemuMatch1.0rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | enterprise_linux | 6.0 | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server_supplementary | 6.1.z | cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.1.z:*:*:*:*:*:*:* |
| qemu | qemu | * | cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* |
| qemu | qemu | 0.15.0 | cpe:2.3:a:qemu:qemu:0.15.0:*:*:*:*:*:*:* |
| qemu | qemu | 0.15.0 | cpe:2.3:a:qemu:qemu:0.15.0:rc1:*:*:*:*:*:* |
| qemu | qemu | 0.15.0 | cpe:2.3:a:qemu:qemu:0.15.0:rc2:*:*:*:*:*:* |
| qemu | qemu | 1.0 | cpe:2.3:a:qemu:qemu:1.0:*:*:*:*:*:*:* |
| qemu | qemu | 1.0 | cpe:2.3:a:qemu:qemu:1.0:rc1:*:*:*:*:*:* |
| qemu | qemu | 1.0 | cpe:2.3:a:qemu:qemu:1.0:rc2:*:*:*:*:*:* |
| qemu | qemu | 1.0 | cpe:2.3:a:qemu:qemu:1.0:rc3:*:*:*:*:*:* |
Related
nessus
nessus
RHEL 6 : qemu-kvm (RHSA-2011:1777)
2013-01-24 00:00:00
RHEL 6 : qemu-kvm (RHSA-2011:1801)
2013-01-24 00:00:00
Oracle Linux 6 : qemu-kvm (ELSA-2011-1777)
2013-07-12 00:00:00
centos
centos
qemu security update
2011-12-22 15:53:51
qemu security update
2011-12-22 15:54:26
debiancve
debiancve
CVE-2011-4111
2014-02-26 15:55:08
oraclelinux
oraclelinux
qemu-kvm security update
2011-12-16 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2011-1777)
2015-10-06 00:00:00
CentOS Update for qemu-img CESA-2011:1801 centos6
2012-07-30 00:00:00
CentOS Update for qemu-img CESA-2011:1777 centos6
2012-07-30 00:00:00
cvelist
cvelist
CVE-2011-4111
2014-02-26 15:00:00
ubuntucve
ubuntucve
CVE-2011-4111
2011-11-28 00:00:00
redhat
redhat
(RHSA-2011:1801) Important: qemu-kvm security update
2011-12-08 00:00:00
(RHSA-2011:1777) Important: qemu-kvm security update
2011-12-06 00:00:00
nvd
nvd
CVE-2011-4111
2014-02-26 15:55:08
prion
prion
Buffer overflow
2014-02-26 15:55:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:07:04
CVSS2
6.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.051
Percentile
93.0%
Related for CVE-2011-4111