CVE-2013-4544

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices.  NOTE: some of these details are obtained from third party information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 UNKNOWN
ADJACENT_NETWORK
MEDIUM
AV:A/AC:M/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 51.34%
Affected Products (NVD)
VendorProductVersion
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
qemuqemu
𝑥
≤ 1.7.1
qemuqemu
1.0
qemuqemu
1.0:rc1
qemuqemu
1.0:rc2
qemuqemu
1.0:rc3
qemuqemu
1.0:rc4
qemuqemu
1.0.1
qemuqemu
1.1
qemuqemu
1.1:rc1
qemuqemu
1.1:rc2
qemuqemu
1.1:rc3
qemuqemu
1.1:rc4
qemuqemu
1.4.1
qemuqemu
1.4.2
qemuqemu
1.5.0
qemuqemu
1.5.0:rc1
qemuqemu
1.5.0:rc2
qemuqemu
1.5.0:rc3
qemuqemu
1.5.1
qemuqemu
1.5.2
qemuqemu
1.5.3
qemuqemu
1.6.0
qemuqemu
1.6.0:rc1
qemuqemu
1.6.0:rc2
qemuqemu
1.6.0:rc3
qemuqemu
1.6.1
qemuqemu
1.6.2
qemuqemu
2.0.0:rc0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bookworm
1:7.2+dfsg-7+deb12u7
fixed
bullseye
1:5.2+dfsg-11+deb11u3
fixed
bullseye (security)
1:5.2+dfsg-11+deb11u2
fixed
sid
1:9.1.1+ds-2
fixed
squeeze
not-affected
trixie
1:9.1.1+ds-2
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
lucid
dne
precise
dne
quantal
dne
saucy
Fixed 1.5.0+dfsg-3ubuntu5.4
released
trusty
Fixed 2.0.0~rc1+dfsg-0ubuntu3.1
released
qemu-kvm
lucid
not-affected
precise
not-affected
quantal
not-affected
saucy
dne
trusty
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
qemu
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-arm
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
qemu-block-curl
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-block-iscsi
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-block-rbd
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-block-ssh
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-guest-agent
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-ipxe
suse enterprise sap 15
1.0.0-7.5
fixed
suse enterprise server 12
1.0.0-40.7
fixed
suse enterprise server 12 SP1
1.0.0-5.7
fixed
suse enterprise server 12 SP2
1.0.0-27.15
fixed
suse enterprise server 12 SP3
1.0.0-5.10
fixed
suse enterprise server 12 SP4
1.0.0-4.14
fixed
suse enterprise server 15
1.0.0-7.5
fixed
qemu-kvm
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-lang
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
qemu-ppc
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
qemu-s390
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
qemu-seabios
suse enterprise sap 15
1.11.0-7.5
fixed
suse enterprise server 12
1.7.4-40.7
fixed
suse enterprise server 12 SP1
1.8.1-5.7
fixed
suse enterprise server 12 SP2
1.9.1-27.15
fixed
suse enterprise server 12 SP3
1.10.2-5.10
fixed
suse enterprise server 12 SP4
1.11.0-4.14
fixed
suse enterprise server 12 SP5
1.12.0-1.1
fixed
suse enterprise server 15
1.11.0-7.5
fixed
qemu-sgabios-8
suse enterprise sap 15
7.5
fixed
suse enterprise server 12
40.7
fixed
suse enterprise server 12 SP1
5.7
fixed
suse enterprise server 12 SP2
27.15
fixed
suse enterprise server 12 SP3
5.10
fixed
suse enterprise server 12 SP4
4.14
fixed
suse enterprise server 12 SP5
1.1
fixed
suse enterprise server 15
7.5
fixed
qemu-tools
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
qemu-vgabios
suse enterprise sap 15
1.11.0-7.5
fixed
suse enterprise server 12
1.7.4-40.7
fixed
suse enterprise server 12 SP1
1.8.1-5.7
fixed
suse enterprise server 12 SP2
1.9.1-27.15
fixed
suse enterprise server 12 SP3
1.10.2-5.10
fixed
suse enterprise server 12 SP4
1.11.0-4.14
fixed
suse enterprise server 12 SP5
1.12.0-1.1
fixed
suse enterprise server 15
1.11.0-7.5
fixed
qemu-x86
suse enterprise sap 15
2.11.1-7.5
fixed
suse enterprise server 12
2.0.0-40.7
fixed
suse enterprise server 12 SP1
2.3.1-5.7
fixed
suse enterprise server 12 SP2
2.6.1-27.15
fixed
suse enterprise server 12 SP3
2.9.0-5.10
fixed
suse enterprise server 12 SP4
2.11.2-4.14
fixed
suse enterprise server 12 SP5
3.1.1.1-1.1
fixed
suse enterprise server 15
2.11.1-7.5
fixed
Common Weakness Enumeration
References
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3c99afc779c2c78718a565ad8c5e98de7c2c7484
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8c6c0478996e8f77374e69b6df68655b0b4ba689
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=9878d173f574df74bde0ff50b2f81009fbee81bb
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f12d048a523780dbda702027d4a91b62af1a08d7
http://secunia.com/advisories/58191
http://thread.gmane.org/gmane.comp.emulators.qemu/265562
http://ubuntu.com/usn/usn-2182-1
http://www.osvdb.org/106013
https://bugzilla.redhat.com/show_bug.cgi?id=1087513
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3c99afc779c2c78718a565ad8c5e98de7c2c7484
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8c6c0478996e8f77374e69b6df68655b0b4ba689
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=9878d173f574df74bde0ff50b2f81009fbee81bb
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f12d048a523780dbda702027d4a91b62af1a08d7
http://secunia.com/advisories/58191
http://thread.gmane.org/gmane.comp.emulators.qemu/265562
http://ubuntu.com/usn/usn-2182-1
http://www.osvdb.org/106013
https://bugzilla.redhat.com/show_bug.cgi?id=1087513