Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Fedora 34/33: 2021:0702-1 Critical: QEMU Privilege Escalation

opensuse
Calendar Grey July 19, 2011
Dist Opensuse Esm H88
Addresses two significant weaknesses in openSUSE's kvm that pose severe buffer overflow threats. Make sure to update immediately!
An update that fixes two vulnerabilities is now available

Description

A privileged guest user could cause a buffer overflow in

the virtio subsystem of the host, therefore crashing the

guest or potentially execute arbitrary code on the host

(CVE-2011-2212, CVE-2011-2512).

Topics%20covered

Topics Covered

security advisory buffer overflow security patch important update kvm openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch kvm-4863

- openSUSE 11.3:

zypper in -t patch kvm-4863

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64):

kvm-0.14.0.0-1.10.1

- openSUSE 11.3 (i586 x86_64) [New Version: 0.12.5]:

kvm-0.12.5-1.8.1

References

https://www.suse.com/security/cve/CVE-2011-2212.html

https://www.suse.com/security/cve/CVE-2011-2512.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2011:0803-1
Rating: important
Affected Products: openSUSE 11.4 openSUSE 11.3 . It includes one version update.

Topics%20covered

Topics Covered

security advisory buffer overflow security patch important update kvm openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here