CVE-2013-4540

EUVD-2013-4399
Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
qemuqemu
𝑥
≤ 1.7.1
qemuqemu
0.1.0
qemuqemu
0.1.1
qemuqemu
0.1.2
qemuqemu
0.1.3
qemuqemu
0.1.4
qemuqemu
0.1.5
qemuqemu
0.1.6
qemuqemu
0.2.0
qemuqemu
0.3.0
qemuqemu
0.4.0
qemuqemu
0.4.1
qemuqemu
0.4.2
qemuqemu
0.4.3
qemuqemu
0.5.0
qemuqemu
0.5.1
qemuqemu
0.5.2
qemuqemu
0.5.3
qemuqemu
0.5.4
qemuqemu
0.5.5
qemuqemu
0.6.0
qemuqemu
0.6.1
qemuqemu
0.7.0
qemuqemu
0.7.1
qemuqemu
0.7.2
qemuqemu
0.8.0
qemuqemu
0.8.1
qemuqemu
0.8.2
qemuqemu
0.9.0
qemuqemu
0.9.1
qemuqemu
0.9.1-5
qemuqemu
0.10.0
qemuqemu
0.10.1
qemuqemu
0.10.2
qemuqemu
0.10.3
qemuqemu
0.10.4
qemuqemu
0.10.5
qemuqemu
0.10.6
qemuqemu
0.11.0
qemuqemu
0.11.0:rc0
qemuqemu
0.11.0:rc1
qemuqemu
0.11.0:rc2
qemuqemu
0.11.0-rc0
qemuqemu
0.11.0-rc1
qemuqemu
0.11.0-rc2
qemuqemu
0.11.1
qemuqemu
0.12.0
qemuqemu
0.12.0:rc1
qemuqemu
0.12.0:rc2
qemuqemu
0.12.1
qemuqemu
0.12.2
qemuqemu
0.12.3
qemuqemu
0.12.4
qemuqemu
0.12.5
qemuqemu
0.13.0
qemuqemu
0.13.0:rc0
qemuqemu
0.13.0:rc1
qemuqemu
0.14.0
qemuqemu
0.14.0:rc0
qemuqemu
0.14.0:rc1
qemuqemu
0.14.0:rc2
qemuqemu
0.14.1
qemuqemu
0.15.0:rc1
qemuqemu
0.15.0:rc2
qemuqemu
0.15.1
qemuqemu
0.15.2
qemuqemu
1.0
qemuqemu
1.0:rc1
qemuqemu
1.0:rc2
qemuqemu
1.0:rc3
qemuqemu
1.0:rc4
qemuqemu
1.0.1
qemuqemu
1.1
qemuqemu
1.1:rc1
qemuqemu
1.1:rc2
qemuqemu
1.1:rc3
qemuqemu
1.1:rc4
qemuqemu
1.4.1
qemuqemu
1.4.2
qemuqemu
1.5.0
qemuqemu
1.5.0:rc1
qemuqemu
1.5.0:rc2
qemuqemu
1.5.0:rc3
qemuqemu
1.5.1
qemuqemu
1.5.2
qemuqemu
1.5.3
qemuqemu
1.6.0
qemuqemu
1.6.0:rc1
qemuqemu
1.6.0:rc2
qemuqemu
1.6.0:rc3
qemuqemu
1.6.1
qemuqemu
1.6.2
opensuseopensuse
12.3
opensuseopensuse
13.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bookworm
1:7.2+dfsg-7+deb12u7
fixed
bullseye
1:5.2+dfsg-11+deb11u3
fixed
bullseye (security)
1:5.2+dfsg-11+deb11u2
fixed
sid
1:9.1.1+ds-2
fixed
squeeze
no-dsa
trixie
1:9.1.1+ds-2
fixed
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
lucid
dne
precise
dne
quantal
dne
saucy
ignored
trusty
Fixed 2.0.0+dfsg-2ubuntu1.3
released
qemu-kvm
lucid
Fixed 0.12.3+noroms-0ubuntu9.24
released
precise
Fixed 1.0+noroms-0ubuntu14.17
released
quantal
ignored
saucy
dne
trusty
dne