Every CVE Search/ Get API key

CVE-2011-1750

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14...

7.4 High

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Exploit likelihood

0.71%Down 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.4

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Record
CVE-2011-1750
CVSS 2.0
7.4 HighAV:A/AC:M/Au:S/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Record
CVE-2011-1750
Updated
2026-11-02
EUVDEUVD-2011-1749 No score

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Record
EUVD-2011-1749
Updated
2026-11-03
GitHub AdvisoriesGHSA-wj46-785g-vq37 No score

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14...

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Record
GHSA-wj46-785g-vq37
Weakness
CWE-119
Updated
2026-11-02
OSVSUSE-SU-2015:0929-1 No score

Security update for kvm

The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17).

Also a temp file race was fixed. (CVE-2012-2652)

Security Issue reference:

* CVE-2012-3515
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515>
* CVE-2012-2652
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652>
Record
SUSE-SU-2015:0929-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu-kvm
Debian:6.0
From an advisory covering 2 CVEs
 before 0.12.5+dfsg-5+squeeze1, plus listed versions
0.12.5+dfsg-5
0.12.5+dfsg-5+squeeze1
qemu-img
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-tools
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-img
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-tools
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-img
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
Show 7 moreShow less
Affected packages
PackageAffectedFixed
qemu-kvm
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-tools
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-img
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6
qemu-kvm-tools
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 2:0.12.1.2-2.160.el6
2:0.12.1.2-2.160.el6

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1750 is a high vulnerability (CVSS 7.4) in Qemu, published May 1, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.

References

Show 165 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open