CVE-2013-4377 - CERT CVE
ID CVE-2013-4377
Sažetak Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.
Reference
CVSS
Base: 2.3
Impact: 2.9
Exploitability:4.4
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK MEDIUM SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE PARTIAL
CVSS vektor AV:A/AC:M/Au:S/C:N/I:N/A:P
Zadnje važnije ažuriranje 06-03-2014 - 04:47
Objavljeno 11-10-2013 - 22:55