PT-2014-3522

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description A heap-based buffer overflow issue exists in the virtio load function, located in hw/virtio/virtio.c, which could potentially allow remote attackers to execute arbitrary code. This is achievable by...

PT-2014-2745

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write in the virtio load function. Recommendations For versions prior to 1.7.2,...