CVE-2014-0182

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2

Description A heap-based buffer overflow issue exists in the virtio load function, located in hw/virtio/virtio.c, which could potentially allow remote attackers to execute arbitrary code. This is achievable by providing a crafted config length in a savevm image.

Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue.