PT-2014-2828 · Qemu+2 · Qemu+2

Michael S. Tsirkin · Published 2014-04-11 · Updated 2024-06-15 · CVE-2013-4544

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:A/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions QEMU versions 2.0.0-rc0, 1.7.1, and earlier

Description The issue allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices.

Recommendations For QEMU versions 2.0.0-rc0, 1.7.1, and earlier, consider updating to a newer version to mitigate the risk, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2014-1526

CVE-2013-4544

OPENSUSE-SU-2024:10233-1

USN-2182-1

Affected Products

Alt Linux

Qemu

Ubuntu

References · 116

• https://cve.org/CVERecord?id=CVE-2013-4544 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4544 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1526 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4526 · Security Note
• https://ubuntu.com/security/CVE-2014-0150 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00048 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4531 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4541 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4527 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4538 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4534 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0182 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4535 · Security Note
• http://ubuntu.com/usn/usn-2182-1 · Vendor Advisory
• http://secunia.com/advisories/58191 · Vendor Advisory