CVE-2011-2527

LOW · CVSS 2.1 EPSS 0.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-06-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2011-2527

Severity

LOW

CVSS

2.1

EPSS

0.43%

Original NVD Description

The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.