VULNERABILITY INTELLIGENCE

CVE-2013-4377

CVSS score2.3 LOW
EPSS probability0.46%
CISA KEVNot currently listed
Published2013-10-11
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:S/C:N/I:N/A:P

Description

Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.

Primary references