CVE-2013-4535

Publication date 20 February 2014

Last updated 25 August 2025

Ubuntu priority

Cvss 3 Severity Score

Description

The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
qemu	14.04 LTS trusty	Fixed 2.0.0+dfsg-2ubuntu1.3
	13.10 saucy	Ignored end of life
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release
qemu-kvm	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Ignored end of life
	12.04 LTS precise	Fixed 1.0+noroms-0ubuntu14.17
	10.04 LTS lucid	Not affected

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
qemu	Upstream: http://git.qemu.org/?p=qemu.git;a=commit;h=36cf2a37132c7f01fa9adb5f95f5312b27742fd4 Upstream: http://git.qemu.org/?p=qemu.git;a=commit;h=937251408051e0489f78e4db3c92e045b147b38b

Severity score breakdown

Parameter	Value
Base score	8.8 · High
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Changed
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

USN-2342-1
QEMU vulnerabilities
8 September 2014