Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2013-4536 — HIGH severity vulnerability | Release Alert

CVE-2013-4536

7.8

HIGHCVSS v3

Published

May 28, 2021

CVSS v2

4.6 MEDIUM

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

qemu-project/qemu

GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

< 1.5.3NVD

qemu/qemu

GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.

< 1.5.3NVD

More on this CVE

NVD↗GitHub Advisory↗

bonzini/qemu

GitHubMy QEMU tree

< 1.5.3NVD

birkelund/qemu

< 1.5.3NVD

thuth/qemu

GitLabQEMU mirror for GitLab CI: Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

< 1.5.3NVD