PT-2013-1326

CVE-2013-4536

·

تاريخ النشر

2013-06-12

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue is related to the savevm functionality of the QEMU hardware emulator, which can be exploited to alter savevm data. This could allow an attacker to access confidential data, compromise its integrity, and cause a denial of service. An attacker able to modify the savevm data could potentially corrupt the QEMU process memory on the host, leading to arbitrary code execution with the privileges of the QEMU process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
CESA-2014_0743
CESA-2014_0927
MGASA-2014-0426
OPENSUSE-SU-2024:10233-1
RHSA-2014:0674
RHSA-2014:0743
RHSA-2014_0743
RHSA-2014:0744
RHSA-2014:0888
RHSA-2014:0927
RHSA-2014_0927
RHSA-2014:1268
USN-2342-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾