CVE-2013-4148

Published: Nov 4, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.

Affected (27)

Products: Qemu: Qemu

Qemu

1 product

Qemu

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Qemu Qemu	Version 1.0.1
Qemu Qemu	Version 1.0
Qemu Qemu	Version 1.0 rc1
Qemu Qemu	Version 1.0 rc2
Qemu Qemu	Version 1.0 rc3
Qemu Qemu	Version 1.0 rc4
Qemu Qemu	Version 1.1
Qemu Qemu	Version 1.1 rc1
Qemu Qemu	Version 1.1 rc2
Qemu Qemu	Version 1.1 rc3
Qemu Qemu	Version 1.1 rc4
Qemu Qemu	Version 1.4.1
Qemu Qemu	Version 1.4.2
Qemu Qemu	Version 1.5.0
Qemu Qemu	Version 1.5.0 rc1
Qemu Qemu	Version 1.5.0 rc2
Qemu Qemu	Version 1.5.0 rc3
Qemu Qemu	Version 1.5.1
Qemu Qemu	Version 1.5.2
Qemu Qemu	Version 1.5.3
Qemu Qemu	Version 1.6.0
Qemu Qemu	Version 1.6.0 rc1
Qemu Qemu	Version 1.6.0 rc2
Qemu Qemu	Version 1.6.0 rc3
Qemu Qemu	Version 1.6.1
Qemu Qemu	Version 1.6.2
Qemu Qemu	Version 1.7.1