CVE-2013-4151

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.

References

http://git.qemu.org/?p=qemu.git;a=commitdiff;h=cc45995294b92d95319b4782750a3580cabdbc0c

http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html

http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html

http://rhn.redhat.com/errata/RHSA-2014-0743.html

http://rhn.redhat.com/errata/RHSA-2014-0744.html

Details

Source: MITRE

Published: 2014-11-04

Updated: 2014-11-05

Type: CWE-94

Risk Information

CVSS v2

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 10

Severity: HIGH

Tenable Plugins

View all (14 total)

IDNameProductFamilySeverity
81944Mandriva Linux Security Advisory : qemu (MDVSA-2015:061)NessusMandriva Local Security Checks
high
79407Mandriva Linux Security Advisory : qemu (MDVSA-2014:220)NessusMandriva Local Security Checks
high
79030RHEL 6 : qemu-kvm-rhev (RHSA-2014:0744)NessusRed Hat Local Security Checks
high
79029RHEL 6 : rhev-hypervisor6 3.4.0 (RHSA-2014:0674)NessusRed Hat Local Security Checks
high
77570Ubuntu 10.04 LTS / 12.04 LTS / 14.04 LTS : qemu, qemu-kvm vulnerabilities (USN-2342-1)NessusUbuntu Local Security Checks
high
76907RHEL 7 : qemu-kvm (RHSA-2014:0927)NessusRed Hat Local Security Checks
high
76839CentOS 7 : qemu-kvm (CESA-2014:0927)NessusCentOS Local Security Checks
high
76748Oracle Linux 7 : qemu-kvm (ELSA-2014-0927)NessusOracle Linux Local Security Checks
high
76138SuSE 11.3 Security Update : KVM (SAT Patch Number 9302)NessusSuSE Local Security Checks
high
74490Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20140610)NessusScientific Linux Local Security Checks
high
74474CentOS 6 : qemu-kvm (CESA-2014:0743)NessusCentOS Local Security Checks
high
74461RHEL 6 : qemu-kvm (RHSA-2014:0743)NessusRed Hat Local Security Checks
high
74457Oracle Linux 6 : qemu-kvm (ELSA-2014-0743)NessusOracle Linux Local Security Checks
high
74047Fedora 20 : qemu-1.6.2-5.fc20 (2014-6288)NessusFedora Local Security Checks
high