PT-2014-2818 · Qemu+2 · Qemu+2

Victor Pereira · Published 2014-02-20 · Updated 2020-01-15 · CVE-2013-4532

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qemu versions 1.1.2+dfsg through 2.1+dfsg

Description The issue is related to a buffer overrun that could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

Recommendations For Qemu versions 1.1.2+dfsg through 2.1+dfsg, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2014-2465

CVE-2013-4532

USN-2342-1

Affected Products

Alt Linux

Qemu

Ubuntu

References · 51

• https://github.com/qemu/qemu/commit/2e1198672759eda6e122ff38fcf6df06f27e0fe2 · Patch
• https://osv.dev/vulnerability/USN-2342-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-4532 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4535 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2342-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4532 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0145 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4532 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4531 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4150 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4530 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4542 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0143 · Vendor Advisory