CVE-2013-4530

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2

Description The issue is related to a buffer overflow in the hw/ssi/pl022.c file, which can be triggered by remote attackers sending crafted tx fifo head and rx fifo head values in a savevm image. This can cause a denial of service or potentially allow the execution of arbitrary code.

Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to savevm images to minimize the risk of exploitation.