CVE-2013-4536 | BDVDB-2026-154459 Detail

qemu

Description#

An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-269 Improper Privilege Management

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1066401
https://security.netapp.com/advisory/ntap-20210727-0002/

Exploit#

No public exploit known

History#

Version 12021-05-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.