| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | < 1.7.2 | 1.7.2 |
| virtualization | = 3.0 |
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free