Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-4541
7.5
HIGHCVSS v2
Published
November 4, 2014
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.
qemu-project/qemuGitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org
GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org= 1.0, = 0.12.2, = 0.12.0, <= 1.7.1, = 1.1, = 1.6.0, = 0.1.6, = 1.5.0, = 0.13.0, = 1.5.1, = 0.11.0, = 0.11.0-rc1, = 0.5.1, = 0.5.3, = 1.5.3, = 0.1.5, = 0.4.2, = 0.5.5, = 0.10.1, = 0.10.3, = 0.15.2, = 0.8.2, = 0.1.1, = 0.14.0, = 0.5.2, = 1.4.2, = 0.1.3, = 0.11.1, = 0.14.1, = 0.5.0, = 0.9.0, = 0.9.1-5, = 1.0.1, = 0.10.0, = 0.12.3, = 0.7.1, = 0.7.2, = 0.8.1, = 1.5.2, = 1.4.1, = 0.11.0-rc2, = 0.12.5, = 0.15.0, = 0.15.1, = 0.4.1, = 0.7.0, = 0.1.0, = 0.1.2, = 0.11.0-rc0, = 0.5.4, = 0.10.5, = 0.12.4, = 0.6.1, = 1.6.2, = 1.6.1, = 0.10.2, = 0.10.4, = 0.12.1, = 0.2.0, = 0.3.0, = 0.4.0, = 0.8.0, = 0.1.4, = 0.10.6, = 0.4.3, = 0.6.0, = 0.9.1NVD
qemu/qemu
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.