CVE-2013-4537
Publication date 20 February 2014
Last updated 24 July 2024
Ubuntu priority
The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.
Status
Package | Ubuntu Release | Status |
---|---|---|
qemu | 14.04 LTS trusty |
Fixed 2.0.0+dfsg-2ubuntu1.3
|
qemu-kvm | 14.04 LTS trusty | Not in release |
Patch details
Package | Patch details |
---|---|
qemu |
References
Related Ubuntu Security Notices (USN)
- USN-2342-1
- QEMU vulnerabilities
- 8 September 2014