CVE-2013-4536CWE-269

An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the…

published May 28, 2021

CVSS
—
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-05-28T16:58Z
EPSS history
Timeline
  • 28 MAY 16:58Z
    An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the…
    cvelistv5