CVE-2011-4111

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-26 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.

Affected products

QEMU: through 0.15.1; 0.15.0, 0.15.0-rc1, 0.15.0-rc2, 1.0, 1.0-rc1, 1.0-rc2 (+1)
Red Hat Enterprise Linux: 6.0
RedHat Enterprise Linux Server Supplementary: 6.1.z

References

http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log
http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
http://rhn.redhat.com/errata/RHSA-2011-1777.html
http://rhn.redhat.com/errata/RHSA-2011-1801.html
https://bugzilla.redhat.com/show_bug.cgi?id=751310
http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log
http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
http://rhn.redhat.com/errata/RHSA-2011-1777.html
http://rhn.redhat.com/errata/RHSA-2011-1801.html
https://bugzilla.redhat.com/show_bug.cgi?id=751310

Get alerted when CVE-2011-4111 or the next vulnerability affects your stack