CVE-2013-4533

Description

Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.001

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-4.4.4_02-32.1.x86_64.rpmLinux
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-doc-html-4.4.4_02-32.1.x86_64.rpmLinux
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64.rpmLinux
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586.rpmLinux
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-libs-4.4.4_02-32.1.x86_64.rpmLinux
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-libs-32bit-4.4.4_02-32.1.x86_64.rpmLinux
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-tools-4.4.4_02-32.1.x86_64.rpmLinux
SUSE-SU-2016:0955-1(SUSE Linux Enterprise Desktop 11-SP4 ) xen-tools-domU-4.4.4_02-32.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-debugsource-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Server 12 ) xen-doc-html-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-kmp-default-debuginfo-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-libs-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-libs-32bit-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-libs-debuginfo-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Desktop 12 ) xen-libs-debuginfo-32bit-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Server 12 ) xen-tools-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Server 12 ) xen-tools-debuginfo-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Server 12 ) xen-tools-domU-4.4.4_02-22.19.1.x86_64.rpmLinux
SUSE-SU-2016:1318-1(SUSE Linux Enterprise Server 12 ) xen-tools-domU-debuginfo-4.4.4_02-22.19.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234