VDB

GCVE-110-MAGEIA-2013-341

GCVE-110-MAGEIA-2013-341
Advisory Published
Vulnetix · Advisory published November 22, 2013
A buffer overflow flaw was found in the way QEMU processed the SCSI "REPORT LUNS" command when more than 256 LUNs were specified for a single SCSI target. A privileged guest user could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process (CVE-2013-4344).

Affected Products

VendorProductVersionsPlatforms
Mageiaqemu1.2.0-8.3.mga3 (unaffected), 0 (affected)
Mageiaqemu0 (affected), 1.0-6.6.mga2 (unaffected)

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›