CVE-2013-4539
EPSS 4.3%
Description
Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
How to fix CVE-2013-4539
To remediate CVE-2013-4539, upgrade the affected package to a fixed version below.
- Debian/qemu—upgrade to 2.1+dfsg-1 or later
Is CVE-2013-4539 being exploited?
Low — EPSS is 4.3%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2.1+dfsg-1