KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for running virtual machines using KVM.

It was found that qemu-kvm did not properly drop supplemental group privileges when the root user started guests from the command line ('/usr/libexec/qemu-kvm') with the '-runas' option. A qemu-kvm process started this way could use this flaw to gain access to files on the host that are accessible to the supplementary groups and not accessible to the primary group. (CVE-2011-2527)

Note: This issue only affected qemu-kvm when it was started directly from the command line. It did not affect applications that start qemu-kvm via libvirt, such as the Virtual Machine Manager (virt-manager).

A flaw was found in the way qemu-kvm handled VSC_ATR messages when a guest was configured for a CCID (Chip/Smart Card Interface Devices) USB smart card reader in passthrough mode. An attacker able to connect to the port on the host being used for such a device could use this flaw to crash the qemu-kvm process on the host or, possibly, escalate their privileges on the host. (CVE-2011-4111)

All users of qemu-kvm should upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

A number of additional packages were added to the security repository so that this package could be installed on older SL systems.

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for running virtual machines using KVM.

A flaw was found in the way qemu-kvm handled VSC_ATR messages when a guest was configured for a CCID (Chip/Smart Card Interface Devices) USB smart card reader in passthrough mode. An attacker able to connect to the port on the host being used for such a device could use this flaw to crash the qemu-kvm process on the host or, possibly, escalate their privileges on the host. (CVE-2011-4111)

All users of qemu-kvm should upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6.1 Extended Update Support.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for running virtual machines using KVM.

A flaw was found in the way qemu-kvm handled VSC_ATR messages when a guest was configured for a CCID (Chip/Smart Card Interface Devices) USB smart card reader in passthrough mode. An attacker able to connect to the port on the host being used for such a device could use this flaw to crash the qemu-kvm process on the host or, possibly, escalate their privileges on the host. (CVE-2011-4111)

All users of qemu-kvm should upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1777 advisory.

    - CVE: CVE-2011-4111

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1777 advisory.

  - qemu: ccid: buffer overflow in handling of VSC_ATR message (CVE-2011-4111)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1801 advisory.

    KVM (Kernel-based Virtual Machine) is a full virtualization solution for     Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component     for running virtual machines using KVM.

    A flaw was found in the way qemu-kvm handled VSC_ATR messages when a guest     was configured for a CCID (Chip/Smart Card Interface Devices) USB smart     card reader in passthrough mode. An attacker able to connect to the port on     the host being used for such a device could use this flaw to crash the     qemu-kvm process on the host or, possibly, escalate their privileges on the     host. (CVE-2011-4111)

    All users of qemu-kvm should upgrade to these updated packages, which     contain a backported patch to resolve this issue. After installing this     update, shut down all running virtual machines. Once all virtual machines     have shut down, start them again for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-478:01 advisory.

    KVM (for Kernel-based Virtual Machine) is a full virtualization solution for Linux on x86 hardware.
    Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual     machine has private virtualized hardware: a network card, disk, graphics adapter, etc.
    Security issues fixed with this release:
     CVE-2011-2527      CVE-2011-4111     No information available at the time of writing, see the CVE link below.
     CVE-2012-0029     Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm     0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and     possibly execute arbitrary code via crafted legacy mode packets.
     No information available at the time of writing, see the CVE link below.
    Fixed bugs:
     qemu-kvm scsi option can be used along the device option. Previously, when set to off, it did not     disable the scsi feature but just hid the feature bit, allowing for malicious users to ignore the feature     bit and issue a request. This scsi=off option can be used to mitigate the virtualization aspect of     CVE-2011-4127 before installing the kernel from <A     HREF=http://www.asianux.com/tsn_hq/index.php?m=errata&a=detail&eid=2720&sType... AXSA:2012-228:02</A>. If     it is already installed, you can skip changing the scsi option.Other wise run the guests by invoking     /usr/libexec/qemu-kvm directly and use the -global virtio-blk-pci.scsi=off option to apply the     mitigation.
    Enhancement:
     qemu-kvm is now built with full RELRO and PIE support.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
61195	Scientific Linux Security Update : qemu-kvm on SL6.x x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	medium
57373	CentOS 6 : qemu-kvm (CESA-2011:1777)	Nessus	CentOS Local Security Checks	12/23/2011	1/4/2021	medium
57377	CentOS 6 : qemu-kvm (CESA-2011:1801)	Nessus	CentOS Local Security Checks	12/23/2011	1/4/2021	medium
68398	Oracle Linux 6 : qemu-kvm (ELSA-2011-1777)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	critical
64009	RHEL 6 : qemu-kvm (RHSA-2011:1777)	Nessus	Red Hat Local Security Checks	1/24/2013	4/21/2024	critical
64014	RHEL 6 : qemu-kvm (RHSA-2011:1801)	Nessus	Red Hat Local Security Checks	1/24/2013	4/14/2025	critical
284204	MiracleLinux 4 : qemu-kvm-0.12.1.2-2.209.AXS4.4 (AXSA:2012-478:01)	Nessus	Miracle Linux Local Security Checks	1/14/2026	1/14/2026	critical

Detections

Analytics

Plugins Search

medium

medium

medium

critical

critical

critical

critical