CVE-2013-2016
A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus increase their privileges on the host.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2016?
The severity of CVE-2013-2016 is high with a CVSS score of 7.8.
Which software is affected by CVE-2013-2016?
QEMU versions 1.3.0 and later, as well as Debian Linux 8.0, 9.0, and 10.0, Novell Open Desktop Server 11.0-sp3, and Novell Open Enterprise Server 11.0-sp3 are affected by CVE-2013-2016.
How can a privileged guest user exploit CVE-2013-2016?
A privileged guest user can exploit CVE-2013-2016 by accessing the config space of a virtio device with zero/small sized config space, such as virtio-rng.
How can I fix CVE-2013-2016?
To fix CVE-2013-2016, upgrade to a fixed version of QEMU, such as 1.3.0+dfsg-8+deb10u8 or higher, 1.3.0+dfsg-8+deb10u11 or higher, 1.5.0+dfsg-11+deb11u3 or higher, 1.5.0+dfsg-11+deb11u2 or higher, 1.7.2+dfsg-7+deb12u2 or higher, 8.1.1+ds-2 or higher, or 8.1.2+ds-1 or higher.
Where can I find more information about CVE-2013-2016?
You can find more information about CVE-2013-2016 at the following references: [link](http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00002.html), [link](http://www.openwall.com/lists/oss-security/2013/04/29/5), [link](http://www.openwall.com/lists/oss-security/2013/04/29/6).