CVE-2011-2212: Qemu

High severity, CVSS 7.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."

Affected products

• Qemu Qemu: up to and including 0.14.0; version 0.1.0 only; version 0.1.1 only; version 0.1.2 only; version 0.1.3 only; version 0.1.4 only; …

Published 2012-06-21. Last modified 2026-06-16.