Patchwire CVEs, their patch status, and feeds to follow them

CVE-2013-4377

Fixed in a distro release EPSS <1%

Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.

Published 2013-10-11 · CVE record · OSV

Products: qemu

Distro releases

ReleasePackageFixed in
Debian 12qemu1.7.0+dfsg-4
Debian 13qemu1.7.0+dfsg-4
Debian 14qemu1.7.0+dfsg-4