PT-2013-1326

CVE-2013-4536

·

Published

2013-06-12

·

Updated

2024-06-15

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue is related to the savevm functionality of the QEMU hardware emulator, which can be exploited to alter savevm data. This could allow an attacker to access confidential data, compromise its integrity, and cause a denial of service. An attacker able to modify the savevm data could potentially corrupt the QEMU process memory on the host, leading to arbitrary code execution with the privileges of the QEMU process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
CESA-2014_0743
CESA-2014_0927
MGASA-2014-0426
OPENSUSE-SU-2024:10233-1
RHSA-2014:0674
RHSA-2014:0743
RHSA-2014_0743
RHSA-2014:0744
RHSA-2014:0888
RHSA-2014:0927
RHSA-2014_0927
RHSA-2014:1268
USN-2342-1
Found an issue in the description? Have something to add? Feel free to write us 👾