CVE-2013-4150
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
QEMU是法国Fabrice Bellard个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。ecto是elixir-ecto开源的一个用于数据映射和语言集成查询的工具包。 QEMU 1.5.0版本至1.7.2之前1.7.x版本存在缓冲区错误漏洞，该漏洞源于程序没有正确检查curr_queues值的大小。远程攻击者可利用该漏洞造成拒绝服务或执行任意代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2013-4150
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of curr_queues is greater than max_queues, which triggers an out-of-bounds write.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
QEMU 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
QEMU是法国Fabrice Bellard个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。ecto是elixir-ecto开源的一个用于数据映射和语言集成查询的工具包。 QEMU 1.5.0版本至1.7.2之前1.7.x版本存在缓冲区错误漏洞，该漏洞源于程序没有正确检查curr_queues值的大小。远程攻击者可利用该漏洞造成拒绝服务或执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2013-4150
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-4150
请登录查看更多情报信息。
Vendor Advisories for CVE-2013-4150 (1)
Mailing List Discussions for CVE-2013-4150 (2)
-
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html vendor-advisory x_refsource_FEDORA
-
🔗 http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html mailing-list x_refsource_MLIST
Other References for CVE-2013-4150 (1)
Same Patch Batch · n/a · 2014-11-04 · 46 CVEs total
| CVE-2014-5387 | EllisLab ExpressionEngine SQL注入漏洞 | |
| CVE-2014-8584 | WordPress Web Dorado Spider Video Player插件跨站脚本漏洞 | |
| CVE-2014-8586 | WordPress CP Multi View Event Calendar插件‘calid’参数SQL注入漏洞 | |
| CVE-2014-8589 | SAP Network Interface Router 整数溢出漏洞 | |
| CVE-2014-8590 | SAP NetWeaver Application Server Java XML外部实体漏洞 | |
| CVE-2014-8591 | SAP Internet Communication Manager 拒绝服务漏洞 | |
| CVE-2014-8592 | SAP Host Agent 拒绝服务漏洞 | |
| CVE-2014-4311 | Epicor Enterprise 信息泄露漏洞 | |
| CVE-2014-8588 | SAP HANA SQL注入漏洞 | |
| CVE-2014-7176 | Enalean Tuleap SQL注入漏洞 | |
| CVE-2014-8339 | Nuevolab Nuevoplayer for ClipShare SQL注入漏洞 | |
| CVE-2013-7057 | Axway SecureTransport 跨站请求伪造漏洞 | |
| CVE-2014-8593 | Allomani Weblinks 跨站脚本漏洞 | |
| CVE-2014-4974 | ESET Personal Firewall NDIS filter内核模式驱动程序信息泄露漏洞 | |
| CVE-2014-3660 | Libxml2 拒绝服务漏洞 | |
| CVE-2014-7875 | HP LaserJet CM3530 Multifunction Printer CC519A和CC520A 远程拒绝服务漏洞 | |
| CVE-2014-6130 | IBM Notes Traveler For Android 信息泄露漏洞 | |
| CVE-2014-8474 | CA Cloud Service Management 安全漏洞 | |
| CVE-2014-8473 | CA Cloud Service Management 跨站请求伪造漏洞 | |
| CVE-2014-8472 | CA Cloud Service Management 安全漏洞 |
Showing top 20 of 46 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2013-4150
No comments yet