CVE-2011-3346: Qemu

Medium severity, CVSS 4.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.

Affected products

• Qemu Qemu: up to and including 0.15.1; version 0.15.0 only
• Red Hat Enterprise Linux: version 5 only
• Xen Xen: affected versions not specified

Published 2014-04-01. Last modified 2026-06-16.