NVD

Id
39990  
Name
CVE-2013-4377  
Description
Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.  
Reject
 
CVSS Version
2  
CVSS Score
2.3  
Severity
Low  
CVSS Base Score
2.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-11  
Modified Date
2014-03-05  
Seq
2013-4377  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203480 39990 CVE-2013-4377 [Qemu-devel] 20130920 [PATCH 11/11] virtio-pci: add device_unplugged callback  View
203481 39990 CVE-2013-4377 [oss-security] 20130926 Re: CVE request: qemu host crash from within guest  View
203482 39990 CVE-2013-4377 USN-2092-1  View
203483 39990 CVE-2013-4377 https://bugzilla.redhat.com/show_bug.cgi?id=1012633  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23046 JVNDB-2013-004621 Qemu の virtio-pci の実装におけるサービス運用妨害 (DoS) の脆弱性 Qemu の virtio-pci の実装には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4377 64319 CVE-2013-4377 39990 2.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004621.html 2013-09-20 2013-10-16 View