CVE

Id
64487  
CVE No.
CVE-2013-4540  
Status
Candidate  
Description
Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635626 64487 CVE-2013-4540 MLIST:[Qemu-devel] 20131213 [PATCH 00/23] qemu state loading issues  View
635627 64487 CVE-2013-4540 URL:http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html  View
635628 64487 CVE-2013-4540 MLIST:[Qemu-stable] 20140723 [ANNOUNCE] QEMU 1.7.2 Stable released  View
635629 64487 CVE-2013-4540 URL:http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html  View
635630 64487 CVE-2013-4540 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=52f91c3723932f8340fe36c8ec8b18a757c37b2b  View
635631 64487 CVE-2013-4540 FEDORA:FEDORA-2014-6288  View
635632 64487 CVE-2013-4540 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html  View
635633 64487 CVE-2013-4540 SUSE:openSUSE-SU-2014:1279  View
635634 64487 CVE-2013-4540 URL:http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html  View
635635 64487 CVE-2013-4540 SUSE:openSUSE-SU-2014:1281  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23657 JVNDB-2013-005232 cURL および libcurl における SSL サーバになりすまされる脆弱性 cURL および libcurl は、OpenSSL を使用して構築されている場合、デジタル署名の検証 (CURLOPT_SSL_VERIFYPEER) が無効になっていると、証明書の CN と SAN の名前フィールドの検証 (CURLOPT_SSL_VERIFYPEER) を無効にするため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2013-4545 64487 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005232.html  View