7.5
CVSSv2

CVE-2013-4149

Published: 04/11/2014 Updated: 13/02/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 up to and including 1.7.x prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a large MAC table.

Vulnerable Product Search on Vulmon Subscribe to Product

qemu qemu 1.6.0

qemu qemu 1.5.0

qemu qemu 1.5.3

qemu qemu 1.3.0

qemu qemu 1.5.1

qemu qemu 1.5.2

qemu qemu 1.7.1

qemu qemu 1.4.1

qemu qemu 1.4.2

qemu qemu 1.6.2

qemu qemu 1.6.1

qemu qemu 1.3.1

Vendor Advisories

Debian Bug report logs - #739589 multiple security flaws in migration stream processing Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 20 Feb 2014 08:36:01 UT ...
Several security issues were fixed in QEMU ...
Buffer overflow in virtio_net_load function in net/virtio-netc in QEMU 130 through 17x before 172 might allow remote attackers to execute arbitrary code via a large MAC table ...