CVE-2013-4536 in Fabrice Bellard QEMU
Summary
An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
Reservation
06/12/2013
Disclosure
05/28/2021
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13278 | Fabrice Bellard QEMU virtio.c virtqueue_map_sg memory corruption | 119 | Unproven | Official fix | CVE-2013-4536 |