CVE catalog

CVE-2011-2212

qemu-kvm - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.70% · Oct 27, 2026

Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests." qemu-kvm: virtqueue: too-large indirect descriptor buffer overflow This issue only affects Red Hat Enterprise Linux 6. The version of the qemu/kvm as shipped with Red Hat Enterprise Linux 5 is not affected because it does not provide support for indirect descriptors. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianqemu-kvm6.00.12.5+dfsg-5vulnerable
Debianqemu-kvm6.00.12.5+dfsg-5+squeeze1vulnerable
Debianqemu-kvm6.00.12.5+dfsg-5+squeeze2vulnerable
Debianqemu-kvm6.00.12.5+dfsg-5+squeeze3vulnerable
Debianqemu-kvm6.00.12.5+dfsg-5+squeeze4vulnerable
Debianqemu-kvm6.00.12.5+dfsg-5+squeeze4~bpo50+1vulnerable
Debianqemu-kvm6.00.12.5+dfsg-5+squeeze5vulnerable
Debianqemu-kvm6.00.12.5+dfsg-5+squeeze6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianqemu-kvmdeb6.00.12.5+dfsg-5+squeeze6Not reportedDSA-2282-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]