CVE-2013-4539
Publication date 20 February 2014
Last updated 24 July 2024
Ubuntu priority
Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
Status
Package | Ubuntu Release | Status |
---|---|---|
qemu | 14.04 LTS trusty |
Fixed 2.0.0+dfsg-2ubuntu1.3
|
qemu-kvm | 14.04 LTS trusty | Not in release |
Patch details
Package | Patch details |
---|---|
qemu |
References
Related Ubuntu Security Notices (USN)
- USN-2342-1
- QEMU vulnerabilities
- 8 September 2014