CVE-2013-4535 Code injection in QEMU
Remote attackers can execute arbitrary code via a crafted savevm image in QEMU's virtqueue_map_sg function, affecting virtualization hosts.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-4535?
CVE-2013-4535 is a high-severity code injection vulnerability in Qemu Qemu, published on 11 Feb 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
Weakness: CWE-20
Which versions are affected by CVE-2013-4535?
It affects 6 products.
Products include Qemu Qemu, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Tus, Redhat Enterprise Linux Workstation, Redhat Virtualization.
How do I fix CVE-2013-4535?
Upgrade to a fixed version.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2013-4535 being exploited?
There is no known exploitation of CVE-2013-4535 in the wild and no public exploit code.
Other vulnerabilities in Qemu Qemu
Sources
Also known as DEBIAN-CVE-2013-4535, GHSA-4g6m-vjr9-mv9r, UBUNTU-CVE-2013-4535.