CVE-2011-2527

The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows…

published June 21, 2012

CVSS
—
EPSS
0%
Percentile
36.8
In the wild
Unconfirmed
What it is

The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00439 · 36.8th percentile
Published
2012-06-21T15:00Z
EPSS history
Timeline
  • 21 JUN 15:00Z
    The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows…
    cvelistv5