CVE-2014-0182 in QEMU

Resumen (Inglés)

Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2013-12-03

Divulgación

2014-11-04

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
13023	Fabrice Bellard QEMU virtio.c virt_load desbordamiento de búfer	119	No probado	Unavailable	CVE-2014-0182

Fuentes

• MITRE
• NVD
• CVE Details