QEMU 'savevm 'Data Buffer Overflow Vulnerability

QEMU 'savevm 'Data Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
QEMU
Description:
Bugtraq id: 69682
CVE (CAN) ID: CVE-2013-4532

QEMU is an open source simulator software.

QEMU has multiple buffer overflow vulnerabilities during site migration. Attackers can exploit these vulnerabilities to execute arbitrary code in the context of the affected application.

<* Source: vendor
*>

Suggestion:
Vendor patch:

QEMU
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://fabrice.bellard.free.fr/qemu/

Refer:

Http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00403.html
Http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00414.html
Http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00404.html

Ubuntu 12.04 cannot find the Qemu command

Install QEMU + efi bios on Arch Linux

QEMU translation framework and debugging tools

QEMU details: click here
QEMU: click here

This article permanently updates the link address: