PT-2012-1561 · Qemu+2 · Qemu+2

Andrew Griffiths · Publicado 2011-12-05 · Atualizado 2020-11-02 · CVE-2011-2527

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qemu versions 0.14.0 and earlier

Description The issue arises from the change process uid function in os-posix.c, which fails to properly drop group privileges when the -runas option is used. This allows local guest users to access restricted files on the host.

Recommendations For Qemu versions 0.14.0 and earlier, consider restricting access to sensitive files on the host until a fixed version is available. As a temporary workaround, avoid using the -runas option to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2527

DSA-2282-1

RHSA-2011:1531

RHSA-2011_1531

SUSE-SU-2012_0127-1

Produtos afetados

Qemu

Red Hat

Suse

Referências · 30

• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html · Aviso do Fabricante
• https://bugzilla.novell.com/695510 · Nota
• http://openwall.com/lists/oss-security/2011/07/12/15 · Nota
• http://secunia.com/advisories/47992 · Aviso do Fabricante
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://secunia.com/advisories/45419 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0029 · Nota de Segurança
• http://osvdb.org/74752 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2527 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2011-1531.html · Aviso do Fabricante
• http://support.novell.com/security/cve/CVE-2012-0029.html · Nota
• https://bugzilla.novell.com/740165 · Nota
• https://debian.org/security/2011/dsa-2282 · Aviso do Fabricante
• http://securityfocus.com/bid/48659 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2012-January/000011.html · Nota