PT-2014-2815

CVE-2013-4529

·

Published

2014-02-20

·

Updated

2024-06-15

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2
Description The issue is related to a buffer overflow in the hw/pci/pcie aer.c file. This can be exploited by remote attackers to cause a denial of service and potentially execute arbitrary code. The exploitation is possible via a large log num value in a savevm image.
Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2014-1526
CESA-2014_0927
MGASA-2014-0426
OPENSUSE-SU-2016_0995-1
OPENSUSE-SU-2024:10233-1
RHSA-2014:0927
RHSA-2014_0927
RHSA-2014:1268
SUSE-SU-2016:0955-1
SUSE-SU-2016:1318-1
SUSE-SU-2016:1745-1
USN-2342-1
Found an issue in the description? Have something to add? Feel free to write us 👾