bonzini/qemu

Releases511

Frequency1 week 6 days

Last Release over 4 years ago

Stars17

My QEMU tree

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2011-3346 ↗	Apr 1, 2014Tuesday, 1 April 2014, 06:35	—	4 MEDIUM
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.