Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by hot-unplugging a virtio device.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qemu | Qemu | 1.4.0 (including) | 1.4.0 (including) |
| Qemu | Qemu | 1.4.1 (including) | 1.4.1 (including) |
| Qemu | Qemu | 1.4.2 (including) | 1.4.2 (including) |
| Qemu | Qemu | 1.5.0 (including) | 1.5.0 (including) |
| Qemu | Qemu | 1.5.0-rc1 (including) | 1.5.0-rc1 (including) |
| Qemu | Qemu | 1.5.0-rc2 (including) | 1.5.0-rc2 (including) |
| Qemu | Qemu | 1.5.0-rc3 (including) | 1.5.0-rc3 (including) |
| Qemu | Qemu | 1.5.1 (including) | 1.5.1 (including) |
| Qemu | Qemu | 1.5.2 (including) | 1.5.2 (including) |
| Qemu | Qemu | 1.5.3 (including) | 1.5.3 (including) |
| Qemu | Qemu | 1.6.0 (including) | 1.6.0 (including) |
| Qemu | Qemu | 1.6.0-rc1 (including) | 1.6.0-rc1 (including) |
| Qemu | Qemu | 1.6.0-rc2 (including) | 1.6.0-rc2 (including) |
| Qemu | Qemu | 1.6.0-rc3 (including) | 1.6.0-rc3 (including) |
| Qemu | Ubuntu | devel | * |
| Qemu | Ubuntu | raring | * |
| Qemu | Ubuntu | saucy | * |
| Qemu | Ubuntu | upstream | * |
References
- http://lists.nongnu.org/archive/html/qemu-devel/2013-09/msg03347.html
- http://secunia.com/advisories/55015
- http://www.openwall.com/lists/oss-security/2013/09/26/5
- http://www.ubuntu.com/usn/USN-2092-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1012633
- http://lists.nongnu.org/archive/html/qemu-devel/2013-09/msg03347.html
- http://secunia.com/advisories/55015
- http://www.openwall.com/lists/oss-security/2013/09/26/5
- http://www.ubuntu.com/usn/USN-2092-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1012633