Vulnetix
Try Vulnetix Request Demo
CVE-2013-4541 PUBLISHED

The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.

EPSS 1.73% · 82.3th percentile

Risk Scores

EPSS Score
1.73%
82.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSqemu0, 1.5.0+dfsg-3ubuntu5, 1.5.0+dfsg-3ubuntu6

Timeline

References

Open in Interactive Console →