MEDIUM · 4.9

CVE-2013-4544

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or...

Vulnerability Description

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices. NOTE: some of these details are obtained from third party information.

CVSS Score

4.9

MEDIUM

AV:A/AC:M/Au:S/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
CanonicalUbuntu Linux10.04
QemuQemu<= 1.7.1

Related Weaknesses (CWE)

References

FAQ

What is CVE-2013-4544?

CVE-2013-4544 is a vulnerability with a CVSS score of 4.9 (MEDIUM). hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or...

How severe is CVE-2013-4544?

CVE-2013-4544 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4544?

Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux, Qemu Qemu.