CVEvulnerability

CVE-2013-4536

7.8 HIGH Published 2021-05-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2021-05-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-269

Description

An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

Affected configurations

• qemu qemu (< 1.5.3)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References