CVE-2013-4536

Katalog CVE

CVSS 7.8 · High EPSS 0,30%

Kerentanan Improper Privilege Management pada qemu. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

Rincian

Terbit di NVD

28 Mei 2021

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1066401 issue tracking · patch · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210727-0002/ advisory pihak ketiga