{"id":"CVE-2013-4532","aliases":["DEBIAN-CVE-2013-4532","EUVD-2013-4391","GHSA-6fpp-r2v5-x6rq","UBUNTU-CVE-2013-4532","USN-2342-1"],"status":"published","title":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in...","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00465,"percentile":0.40519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-02-20T00:00:00Z","modified":"2026-09-01T20:03:18Z","fixes":[{"ecosystem":"Debian:12","package":"qemu","fixed_in":["2.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["2.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["2.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"qemu","fixed_in":["2.0.0+dfsg-2ubuntu1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-2ubuntu1.3"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3","2.0.0~rc1+dfsg-0ubuntu3.1","2.0.0+dfsg-2ubuntu1","2.0.0+dfsg-2ubuntu1.1","2.0.0+dfsg-2ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-2ubuntu1.3"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3","2.0.0~rc1+dfsg-0ubuntu3.1","2.0.0+dfsg-2ubuntu1","2.0.0+dfsg-2ubuntu1.1","2.0.0+dfsg-2ubuntu1.2"],"bundled":32}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"qemu","product":"qemu"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4532","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4532","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4532","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://access.redhat.com/security/cve/cve-2013-4532","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2342-1","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739589","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://github.com/qemu/qemu/commit/2e1198672759eda6e122ff38fcf6df06f27e0fe2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4532"},{"url":"https://github.com/advisories/GHSA-6fpp-r2v5-x6rq"},{"url":"https://ubuntu.com/security/CVE-2013-4532","tags":["report"]},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html","tags":["report"]},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00403.html","tags":["report"]},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00414.html","tags":["report"]},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00404.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2342-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-6399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3471","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-4532","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","status":"published","published":"2020-01-02T15:26:40Z","modified":"2024-08-06T16:45:14.82Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-4391","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","status":"published","published":"2020-01-02T15:26:40Z","modified":"2024-08-06T16:45:14Z","updated_at":"2026-11-03T01:56:31.667445Z"}],"ghsa":[{"id":"GHSA-6fpp-r2v5-x6rq","title":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in...","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","status":"published","published":"2022-05-05T00:29:17Z","modified":"2023-02-01T05:01:52Z","updated_at":"2026-11-02T14:49:47.696223Z"}],"nvd":[{"id":"CVE-2013-4532","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","status":"published","published":"2020-01-02T16:15:11.56Z","modified":"2026-06-16T23:57:24.15Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:52.545039Z"}],"osv":[{"id":"CVE-2013-4532","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","status":"published","published":"2020-01-02T16:15:11Z","modified":"2026-04-10T03:43:00.675507Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-4532","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","status":"published","published":"2020-01-02T16:15:11.56Z","modified":"2026-09-01T20:03:18.389991126Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"UBUNTU-CVE-2013-4532","description":"Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.","status":"published","published":"2014-02-20T00:00:00Z","modified":"2026-02-04T02:54:41.238604Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:07.421078Z"},{"id":"USN-2342-1","title":"qemu, qemu-kvm vulnerabilities","description":"Michael S. Tsirkin, Anthony Liguori, and Michael Roth discovered multiple\nissues with QEMU state loading after migration. An attacker able to modify\nthe state data could use these issues to cause a denial of service, or\npossibly execute arbitrary code. (CVE-2013-4148, CVE-2013-4149,\nCVE-2013-4150, CVE-2013-4151, CVE-2013-4526, CVE-2013-4527, CVE-2013-4529,\nCVE-2013-4530, CVE-2013-4531, CVE-2013-4532, CVE-2013-4533, CVE-2013-4534,\nCVE-2013-4535, CVE-2013-4536, CVE-2013-4537, CVE-2013-4538, CVE-2013-4539,\nCVE-2013-4540, CVE-2013-4541, CVE-2013-4542, CVE-2013-6399, CVE-2014-0182,\nCVE-2014-3461)\n\nKevin Wolf, Stefan Hajnoczi, Fam Zheng, Jeff Cody, Stefan Hajnoczi, and\nothers discovered multiple issues in the QEMU block drivers. An attacker\nable to modify disk images could use these issues to cause a denial of\nservice, or possibly execute arbitrary code. (CVE-2014-0142, CVE-2014-0143,\nCVE-2014-0144, CVE-2014-0145, CVE-2014-0146, CVE-2014-0147, CVE-2014-0222,\nCVE-2014-0223)\n\nIt was discovered that QEMU incorrectly handled certain PCIe bus hotplug\noperations. A malicious guest could use this issue to crash the QEMU host,\nresulting in a denial of service. (CVE-2014-3471)\n","status":"published","published":"2014-09-08T17:35:27Z","modified":"2026-02-10T04:40:50Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}