Vulnetix
Try Vulnetix Request Demo
CVE-2013-4148 PUBLISHED

Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.

EPSS 3.13% · 86.8th percentile

Risk Scores

EPSS Score
3.13%
86.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSqemu0, 1.5.0+dfsg-3ubuntu5, 1.5.0+dfsg-3ubuntu6

Timeline

References

Open in Interactive Console →