CVE-2013-4344

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified) SUSE Linux Enterprise (affected versions not specified)

Description The issue concerns a buffer overflow in the SCSI implementation, potentially allowing local users to gain privileges. This could lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation can be carried out locally by an authenticated attacker.

Recommendations For QEMU, consider restricting access to the SCSI implementation until a patch is available. For SUSE Linux Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability.