CVE-2013-4151
Publication date 20 February 2014
Last updated 24 July 2024
Ubuntu priority
The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.
Status
Package | Ubuntu Release | Status |
---|---|---|
qemu | 14.04 LTS trusty |
Fixed 2.0.0+dfsg-2ubuntu1.3
|
qemu-kvm | 14.04 LTS trusty | Not in release |
Patch details
Package | Patch details |
---|---|
qemu |
References
Related Ubuntu Security Notices (USN)
- USN-2342-1
- QEMU vulnerabilities
- 8 September 2014