CVE-2013-4377
Fixed in a distro release EPSS <1%
Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1.7.0+dfsg-4 |
| Debian 13 | qemu | 1.7.0+dfsg-4 |
| Debian 14 | qemu | 1.7.0+dfsg-4 |