Arbitrary Code Execution

🗓️ 02 May 2019 04:58:38Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 32 Views

KVM full virtualization solution for Linux on AMD64 and Intel 64 systems. Multiple buffer overflow, input validation, and out-of-bounds write flaws found in QEMU drivers allowing arbitrary code execution on the host with QEMU process privileges

Reporter	Title	Published	Views	Family All 296
BDU FSTEC	The vulnerability of the savevm function in the QEMU hardware emulation software involves unsafe management of privileges, allowing a malicious actor to access confidential data, compromise its integrity, and cause service failures.	20 Sep 202100:00	–	bdu_fstec
Tenable Nessus	CentOS 6 : qemu-kvm (CESA-2014:0743)	12 Jun 201400:00	–	nessus
Tenable Nessus	CentOS 7 : qemu-kvm (CESA-2014:0927)	26 Jul 201400:00	–	nessus
Tenable Nessus	Debian DSA-2932-1 : qemu - security update	20 May 201400:00	–	nessus
Tenable Nessus	Debian DSA-2933-1 : qemu-kvm - security update	20 May 201400:00	–	nessus
Tenable Nessus	Fedora 20 : qemu-1.6.2-4.fc20 (2014-5825)	2 May 201400:00	–	nessus
Tenable Nessus	Fedora 20 : qemu-1.6.2-5.fc20 (2014-6288)	19 May 201400:00	–	nessus
Tenable Nessus	Fedora 20 : qemu-1.6.2-6.fc20 (2014-6970)	10 Jun 201400:00	–	nessus
Tenable Nessus	GLSA-201408-17 : QEMU: Multiple vulnerabilities	30 Aug 201400:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : qemu (MDVSA-2014:220)	23 Nov 201400:00	–	nessus

Vulners

Node

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.2

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.7

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.6

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.10

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.5

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6_0.8

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6_2.4

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6_2.1

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.9

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.6

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6_0.3

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.5

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.8

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.2

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6_2.5

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6_0.6

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.3

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.2

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.9

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.3

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.1

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.8

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.1

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.2

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.4

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.9

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.10

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.5

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.3

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.5

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.351.el6

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.2

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.8

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.1

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.7

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
rhn	www.rhn.redhat.com/errata/RHSA-2014-0743.html
access	www.access.redhat.com/security/updates/classification/
lists	www.lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
git	www.git.qemu.org/
git	www.git.qemu.org/
lists	www.lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html
rhn	www.rhn.redhat.com/errata/RHSA-2014-0743.html
rhn	www.rhn.redhat.com/errata/RHSA-2014-0744.html

13 Feb 2023 07:17Current

8.5High risk

Vulners AI Score8.5

CVSS 27.5

EPSS0.0531