CVE-2011-2511 Integer overflow in n/a

Medium 4.0 Published 10 Aug 2011 Updated 6 Aug 2024

Remote authenticated users can cause a denial of service or potentially execute arbitrary code via a crafted RPC call in libvirt.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-2511?

CVE-2011-2511 is a medium-severity vulnerability in Redhat Libvirt, published on 10 Aug 2011. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.

Weakness: CWE-189

Which versions are affected by CVE-2011-2511?

It affects 1 product.

Linux distribution packages (13)

`libvirt` Red Hat:enterprise_linux:6::server	All versions	`0:0.8.7-18.el6_1.1`
`libvirt-client` Red Hat:enterprise_linux:6::server	All versions	`0:0.8.7-18.el6_1.1`
`libvirt-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:0.8.7-18.el6_1.1`
`libvirt-devel` Red Hat:enterprise_linux:6::server	All versions	`0:0.8.7-18.el6_1.1`
`libvirt-python` Red Hat:enterprise_linux:6::server	All versions	`0:0.8.7-18.el6_1.1`
`libvirt` Red Hat:rhel_virtualization:5::client	All versions	`0:0.8.2-22.el5`
`libvirt-debuginfo` Red Hat:rhel_virtualization:5::client	All versions	`0:0.8.2-22.el5`
`libvirt-devel` Red Hat:rhel_virtualization:5::client	All versions	`0:0.8.2-22.el5`
`libvirt-python` Red Hat:rhel_virtualization:5::client	All versions	`0:0.8.2-22.el5`
`libvirt` Red Hat:rhel_virtualization:5::server	All versions	`0:0.8.2-22.el5`
`libvirt-debuginfo` Red Hat:rhel_virtualization:5::server	All versions	`0:0.8.2-22.el5`
`libvirt-devel` Red Hat:rhel_virtualization:5::server	All versions	`0:0.8.2-22.el5`
`libvirt-python` Red Hat:rhel_virtualization:5::server	All versions	`0:0.8.2-22.el5`

Products include Redhat Libvirt.

How do I fix CVE-2011-2511?

Upgrade to a fixed version.

Is CVE-2011-2511 being exploited?

There is no known exploitation of CVE-2011-2511 in the wild and no public exploit code.

All Redhat Libvirt vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-2511, GHSA-vxfh-2pc2-vcmc, RHSA-2011:1019, RHSA-2011:1197.