PT-2012-1561 · Qemu+2 · Qemu+2

Andrew Griffiths · Published 2011-12-05 · Updated 2020-11-02 · CVE-2011-2527

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qemu versions 0.14.0 and earlier

Description The issue arises from the change process uid function in os-posix.c, which fails to properly drop group privileges when the -runas option is used. This allows local guest users to access restricted files on the host.

Recommendations For Qemu versions 0.14.0 and earlier, consider restricting access to sensitive files on the host until a fixed version is available. As a temporary workaround, avoid using the -runas option to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-2527

DSA-2282-1

RHSA-2011:1531

RHSA-2011_1531

SUSE-SU-2012_0127-1

Affected Products

Qemu

Red Hat

Suse

References · 30

• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html · Vendor Advisory
• http://secunia.com/advisories/47992 · Vendor Advisory
• http://secunia.com/advisories/45419 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0029 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2527 · Security Note
• http://rhn.redhat.com/errata/RHSA-2011-1531.html · Vendor Advisory
• https://debian.org/security/2011/dsa-2282 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2527 · Security Note
• http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-1531.html · Vendor Advisory
• http://secunia.com/advisories/45188 · Vendor Advisory
• http://secunia.com/advisories/47157 · Vendor Advisory
• http://secunia.com/advisories/45187 · Vendor Advisory
• http://ubuntu.com/usn/usn-1177-1 · Vendor Advisory
• https://bugzilla.novell.com/695510 · Note