CVE-2013-4541
Publication date 20 February 2014
Last updated 24 July 2024
Ubuntu priority
The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.
Status
Package | Ubuntu Release | Status |
---|---|---|
qemu | 14.04 LTS trusty |
Fixed 2.0.0+dfsg-2ubuntu1.3
|
qemu-kvm | 14.04 LTS trusty | Not in release |
Patch details
Package | Patch details |
---|---|
qemu |
References
Related Ubuntu Security Notices (USN)
- USN-2342-1
- QEMU vulnerabilities
- 8 September 2014