Published: 02/01/2020 Updated: 15/01/2020

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu
canonical ubuntu linux 10.04
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0

Debian Bug report logs - #739589 multiple security flaws in migration stream processing Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 20 Feb 2014 08:36:01 UT ...

Several security issues were fixed in QEMU ...

CWE-119 https://security-tracker.debian.org/tracker/CVE-2013-4532 https://access.redhat.com/security/cve/cve-2013-4532 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4532 http://www.ubuntu.com/usn/USN-2342-1 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4532 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739589 https://github.com/qemu/qemu/commit/2e1198672759eda6e122ff38fcf6df06f27e0fe2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739589 https://usn.ubuntu.com/2342-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-4532

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect