CVE-2013-4536
Dashboard / Vulnerabilities / CVE-2013-4536
Summary:
Details: An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
References: https://bugzilla.redhat.com/show_bug.cgi?id=1066401, https://security.netapp.com/advisory/ntap-20210727-0002/, https://bugzilla.redhat.com/show_bug.cgi?id=1066401, https://bugzilla.redhat.com/show_bug.cgi?id=1066401
Affected packages
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
