CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.4
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2012-06-21
Last Modified Date: 2016-12-08