NVD

Id
40132  
Name
CVE-2013-4540  
Description
Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-11-04  
Modified Date
2015-11-20  
Seq
2013-4540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204224 40132 CVE-2013-4540 http://git.qemu.org/?p=qemu.git;a=commit;h=52f91c3723932f8340fe36c8ec8b18a757c37b2b  View
204225 40132 CVE-2013-4540 FEDORA-2014-6288  View
204226 40132 CVE-2013-4540 [Qemu-devel] 20131213 [PATCH 00/23] qemu state loading issues  View
204227 40132 CVE-2013-4540 [Qemu-stable] 20140723 [ANNOUNCE] QEMU 1.7.2 Stable released  View
204228 40132 CVE-2013-4540 openSUSE-SU-2014:1279  View
204229 40132 CVE-2013-4540 openSUSE-SU-2014:1281  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25112 JVNDB-2013-006689 QEMU の scoop_gpio_handler_update におけるバッファオーバーフローの脆弱性 QEMU の scoop_gpio_handler_update には、バッファオーバーフローの脆弱性が存在します。 CVE-2013-4540 64482 CVE-2013-4540 40132 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006689.html 2013-12-03 2014-11-06 View