Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Debian DSA-2282-1 Moderate: KVM Privilege Escalation Threats

debian
Calendar Grey July 25, 2011
Scroller Debian
Several critical vulnerabilities in KVM present risks of privilege escalation and denial of service. Immediate upgrade is advised.
Two vulnerabilities have been discovered in KVM, a solution for full virtualization on x86 hardware: CVE-2011-2212
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow debian privilege escalation remote kvm

Summary

Two vulnerabilities have been discovered in KVM, a solution for full
virtualization on x86 hardware:

CVE-2011-2212

Nelson Elhage discovered a buffer overflow in the virtio subsystem,
which could lead to denial of service or privilege escalation.

CVE-2011-2527

Andrew Griffiths discovered that group privileges were
insufficiently dropped when started with -runas option, resulting
in privilege escalation.

For the stable distribution (squeeze), this problem has been fixed in
version 0.12.5+dfsg-5+squeeze6.

For the unstable distribution (sid), this problem has been fixed in
version 0.14.1+dfsg-3.

We recommend that you upgrade your qemu-kvm packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Package: qemu-kvm
CVE ID: CVE-2011-2212 CVE-2011-2527

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow debian privilege escalation remote kvm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.