CVE-2011-2511
libvirt: integer overflow in VirDomainGetVcpus
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
Desbordamiento de entero en libvirt anterior a v0.9.3 permite a usuarios autenticados remotamente provocar una denegación de servicio (caída libvirtd) y posiblemente ejecutar código arbitrario a través de una llamada manipulada VirDomainGetVcpus RPC que provoca corrupción de memoria.
Updated libvirt packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remotely managing virtualized systems. An integer overflow flaw was found in libvirtd's RPC call handling. An attacker able to establish read-only connections to libvirtd could trigger this flaw by calling virDomainGetVcpus() with specially-crafted parameters, causing libvirtd to crash.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-06-15 CVE Reserved
- 2011-07-19 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-189: Numeric Errors
- CWE-190: Integer Overflow or Wraparound
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://libvirt.org/news.html | X_refsource_confirm | |
| http://www.securitytracker.com/id?1025822 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/68271 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2011/06/28/9 | 2023-02-13 | |
| https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html | 2023-02-13 |
| URL | Date | SRC |
|---|---|---|
| http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html | 2023-02-13 | |
| http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062855.html | 2023-02-13 | |
| http://secunia.com/advisories/45375 | 2023-02-13 | |
| http://secunia.com/advisories/45441 | 2023-02-13 | |
| http://secunia.com/advisories/45446 | 2023-02-13 | |
| http://www.debian.org/security/2011/dsa-2280 | 2023-02-13 | |
| http://www.redhat.com/support/errata/RHSA-2011-1019.html | 2023-02-13 | |
| http://www.redhat.com/support/errata/RHSA-2011-1197.html | 2023-02-13 | |
| http://www.ubuntu.com/usn/USN-1180-1 | 2023-02-13 | |
| https://hermes.opensuse.org/messages/10027908 | 2023-02-13 | |
| https://access.redhat.com/security/cve/CVE-2011-2511 | 2011-08-23 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=717199 | 2011-08-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | <= 0.9.2 Search vendor "Redhat" for product "Libvirt" and version " <= 0.9.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.0.1 Search vendor "Redhat" for product "Libvirt" and version "0.0.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.0.2 Search vendor "Redhat" for product "Libvirt" and version "0.0.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.0.3 Search vendor "Redhat" for product "Libvirt" and version "0.0.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.0.4 Search vendor "Redhat" for product "Libvirt" and version "0.0.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.0.5 Search vendor "Redhat" for product "Libvirt" and version "0.0.5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.0.6 Search vendor "Redhat" for product "Libvirt" and version "0.0.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.0 Search vendor "Redhat" for product "Libvirt" and version "0.1.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.1 Search vendor "Redhat" for product "Libvirt" and version "0.1.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.3 Search vendor "Redhat" for product "Libvirt" and version "0.1.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.4 Search vendor "Redhat" for product "Libvirt" and version "0.1.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.5 Search vendor "Redhat" for product "Libvirt" and version "0.1.5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.6 Search vendor "Redhat" for product "Libvirt" and version "0.1.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.7 Search vendor "Redhat" for product "Libvirt" and version "0.1.7" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.8 Search vendor "Redhat" for product "Libvirt" and version "0.1.8" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.1.9 Search vendor "Redhat" for product "Libvirt" and version "0.1.9" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.2.0 Search vendor "Redhat" for product "Libvirt" and version "0.2.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.2.1 Search vendor "Redhat" for product "Libvirt" and version "0.2.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.2.2 Search vendor "Redhat" for product "Libvirt" and version "0.2.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.2.3 Search vendor "Redhat" for product "Libvirt" and version "0.2.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.3.0 Search vendor "Redhat" for product "Libvirt" and version "0.3.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.3.1 Search vendor "Redhat" for product "Libvirt" and version "0.3.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.3.2 Search vendor "Redhat" for product "Libvirt" and version "0.3.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.3.3 Search vendor "Redhat" for product "Libvirt" and version "0.3.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.4.0 Search vendor "Redhat" for product "Libvirt" and version "0.4.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.4.1 Search vendor "Redhat" for product "Libvirt" and version "0.4.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.4.2 Search vendor "Redhat" for product "Libvirt" and version "0.4.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.4.3 Search vendor "Redhat" for product "Libvirt" and version "0.4.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.4.4 Search vendor "Redhat" for product "Libvirt" and version "0.4.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.4.5 Search vendor "Redhat" for product "Libvirt" and version "0.4.5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.4.6 Search vendor "Redhat" for product "Libvirt" and version "0.4.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.5.0 Search vendor "Redhat" for product "Libvirt" and version "0.5.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.5.1 Search vendor "Redhat" for product "Libvirt" and version "0.5.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.6.0 Search vendor "Redhat" for product "Libvirt" and version "0.6.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.6.1 Search vendor "Redhat" for product "Libvirt" and version "0.6.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.6.2 Search vendor "Redhat" for product "Libvirt" and version "0.6.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.6.3 Search vendor "Redhat" for product "Libvirt" and version "0.6.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.6.4 Search vendor "Redhat" for product "Libvirt" and version "0.6.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.6.5 Search vendor "Redhat" for product "Libvirt" and version "0.6.5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.0 Search vendor "Redhat" for product "Libvirt" and version "0.7.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.1 Search vendor "Redhat" for product "Libvirt" and version "0.7.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.2 Search vendor "Redhat" for product "Libvirt" and version "0.7.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.3 Search vendor "Redhat" for product "Libvirt" and version "0.7.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.4 Search vendor "Redhat" for product "Libvirt" and version "0.7.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.5 Search vendor "Redhat" for product "Libvirt" and version "0.7.5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.6 Search vendor "Redhat" for product "Libvirt" and version "0.7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.7.7 Search vendor "Redhat" for product "Libvirt" and version "0.7.7" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.0 Search vendor "Redhat" for product "Libvirt" and version "0.8.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.1 Search vendor "Redhat" for product "Libvirt" and version "0.8.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.2 Search vendor "Redhat" for product "Libvirt" and version "0.8.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.3 Search vendor "Redhat" for product "Libvirt" and version "0.8.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.4 Search vendor "Redhat" for product "Libvirt" and version "0.8.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.5 Search vendor "Redhat" for product "Libvirt" and version "0.8.5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.6 Search vendor "Redhat" for product "Libvirt" and version "0.8.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.7 Search vendor "Redhat" for product "Libvirt" and version "0.8.7" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.8.8 Search vendor "Redhat" for product "Libvirt" and version "0.8.8" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.9.0 Search vendor "Redhat" for product "Libvirt" and version "0.9.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Libvirt Search vendor "Redhat" for product "Libvirt" | 0.9.1 Search vendor "Redhat" for product "Libvirt" and version "0.9.1" | - |
Affected
| ||||||