Описание
Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.1+dfsg-2ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 2.0.0+dfsg-2ubuntu1.3 |
| lucid | DNE | |
| precise | DNE | |
| quantal | DNE | |
| saucy | ignored | end of life |
| trusty | released | 2.0.0+dfsg-2ubuntu1.3 |
| trusty/esm | not-affected | 2.0.0+dfsg-2ubuntu1.3 |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | released | 0.12.3+noroms-0ubuntu9.24 |
| precise | released | 1.0+noroms-0ubuntu14.17 |
| quantal | ignored | end of life |
| saucy | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | needs-triage |
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.
Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.
Integer signedness error in the virtio_net_load function in hw/net/vir ...
Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.
ELSA-2014-0743: qemu-kvm security and bug fix update (MODERATE)
EPSS
7.5 High
CVSS2