cbcvebase.
CVE-2013-4344
published 2013-10-04

CVE-2013-4344: Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain…

PriorityP430high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.43%
35.2th percentile
Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.

Affected

20 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
debianqemu< qemu 1.6.0+dfsg-2 (bookworm)qemu 1.6.0+dfsg-2 (bookworm)
debianxen< qemu 1.6.0+dfsg-2 (bookworm)qemu 1.6.0+dfsg-2 (bookworm)
opensuseopensuse——
opensuseopensuse——
qemuqemu<= 1.6.2—
qemuqemu>= 0 < 1.6.0+dfsg-21.6.0+dfsg-2
qemuqemu>= 0 < 1.6.0+dfsg-21.6.0+dfsg-2
qemuqemu>= 0 < 1.6.0+dfsg-21.6.0+dfsg-2
qemuqemu>= 0 < 1.6.0+dfsg-21.6.0+dfsg-2
redhatenterprise_linux_desktop——
redhatenterprise_linux_server——
redhatenterprise_linux_workstation——
redhatvirtualization——
xenxen>= 0 < 4.2-14.2-1
xenxen>= 0 < 4.2-14.2-1
xenxen>= 0 < 4.2-14.2-1
xenxen>= 0 < 4.2-14.2-1

CVSS provenance

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.2HIGH
vendor_debian7.2LOW
vendor_redhat7.2HIGH
vendor_ubuntu7.2HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.