VIR Vulnerability Intelligence Relay

CVE-2013-4544

medium
Published 2014-05-08 · Modified 2026-05-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.9

Description

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices. NOTE: some of these details are obtained from third party information.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

OS impact
OSVersionStatusFixed in
ubuntu ubuntu10.04affected
ubuntu ubuntu12.04affected
ubuntu ubuntu12.10affected
ubuntu ubuntu13.10affected
ubuntu ubuntu14.04affected
debian debianbookwormfixed2.0.0+dfsg-1
debian debianbullseyefixed2.0.0+dfsg-1
debian debianforkyfixed2.0.0+dfsg-1
debian debiansidfixed2.0.0+dfsg-1
debian debiantrixiefixed2.0.0+dfsg-1

Application impact
VendorProductVersionsFixed
qemuqemu{"endIncluding":"1.7.1"}
qemuqemu1.0
qemuqemu1.0.1
qemuqemu1.1
qemuqemu1.4.1
qemuqemu1.4.2
qemuqemu1.5.0
qemuqemu1.5.1
qemuqemu1.5.2
qemuqemu1.5.3
qemuqemu1.6.0
qemuqemu1.6.1
qemuqemu1.6.2
qemuqemu2.0.0

References

CWEs

CWE-20

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.