CVE-2013-2016 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2013-2016 Interim 1 18 2023-02-15T02:10:41Z current 2021-05-30T13:11:19Z 2023-02-15T02:10:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2013-2016 A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus increase their privileges on the host. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00002.html E-Mail link for SUSE-SU-2014:0623-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 kvm-1.4.2-0.11.1 kvm-1.4.2-30.5 qemu qemu-arm qemu-block-curl qemu-block-iscsi qemu-block-rbd qemu-block-ssh qemu-guest-agent qemu-ipxe qemu-kvm qemu-lang qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-tools qemu-vgabios qemu-x86 kvm-1.4.2-0.11.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 kvm-1.4.2-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3 kvm-1.4.2-0.11.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA kvm-1.4.2-30.5 as a component of SUSE Linux Enterprise Server 11 SP4 kvm-1.4.2-0.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 qemu as a component of HPE Helion OpenStack 8 qemu-block-curl as a component of HPE Helion OpenStack 8 qemu-block-iscsi as a component of HPE Helion OpenStack 8 qemu-block-rbd as a component of HPE Helion OpenStack 8 qemu-block-ssh as a component of HPE Helion OpenStack 8 qemu-guest-agent as a component of HPE Helion OpenStack 8 qemu-ipxe as a component of HPE Helion OpenStack 8 qemu-kvm as a component of HPE Helion OpenStack 8 qemu-lang as a component of HPE Helion OpenStack 8 qemu-seabios as a component of HPE Helion OpenStack 8 qemu-sgabios as a component of HPE Helion OpenStack 8 qemu-tools as a component of HPE Helion OpenStack 8 qemu-vgabios as a component of HPE Helion OpenStack 8 qemu-x86 as a component of HPE Helion OpenStack 8 qemu as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-block-curl as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-block-iscsi as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-block-rbd as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-block-ssh as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-guest-agent as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-ipxe as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-kvm as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-lang as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-seabios as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-sgabios as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-tools as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-vgabios as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu-x86 as a component of SUSE Linux Enterprise Server 12 SP3-BCL qemu as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-arm as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-block-curl as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-block-iscsi as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-block-rbd as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-block-ssh as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-guest-agent as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-ipxe as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-kvm as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-lang as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-seabios as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-sgabios as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-tools as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-vgabios as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu-x86 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS qemu as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-arm as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-block-curl as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-block-iscsi as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-block-rbd as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-block-ssh as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-guest-agent as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-ipxe as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-kvm as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-lang as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-ppc as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-s390 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-seabios as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-sgabios as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-tools as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-vgabios as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu-x86 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS qemu as a component of SUSE Linux Enterprise Server Teradata 12 SP3 qemu as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-block-curl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-block-iscsi as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-block-rbd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-block-ssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-guest-agent as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-ipxe as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-kvm as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-lang as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-ppc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-seabios as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-sgabios as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-tools as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-vgabios as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu-x86 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 qemu as a component of SUSE OpenStack Cloud 8 qemu-block-curl as a component of SUSE OpenStack Cloud 8 qemu-block-iscsi as a component of SUSE OpenStack Cloud 8 qemu-block-rbd as a component of SUSE OpenStack Cloud 8 qemu-block-ssh as a component of SUSE OpenStack Cloud 8 qemu-guest-agent as a component of SUSE OpenStack Cloud 8 qemu-ipxe as a component of SUSE OpenStack Cloud 8 qemu-kvm as a component of SUSE OpenStack Cloud 8 qemu-lang as a component of SUSE OpenStack Cloud 8 qemu-seabios as a component of SUSE OpenStack Cloud 8 qemu-sgabios as a component of SUSE OpenStack Cloud 8 qemu-tools as a component of SUSE OpenStack Cloud 8 qemu-vgabios as a component of SUSE OpenStack Cloud 8 qemu-x86 as a component of SUSE OpenStack Cloud 8 qemu as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-curl as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-iscsi as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-rbd as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-ssh as a component of SUSE OpenStack Cloud Crowbar 8 qemu-guest-agent as a component of SUSE OpenStack Cloud Crowbar 8 qemu-ipxe as a component of SUSE OpenStack Cloud Crowbar 8 qemu-kvm as a component of SUSE OpenStack Cloud Crowbar 8 qemu-lang as a component of SUSE OpenStack Cloud Crowbar 8 qemu-seabios as a component of SUSE OpenStack Cloud Crowbar 8 qemu-sgabios as a component of SUSE OpenStack Cloud Crowbar 8 qemu-tools as a component of SUSE OpenStack Cloud Crowbar 8 qemu-vgabios as a component of SUSE OpenStack Cloud Crowbar 8 qemu-x86 as a component of SUSE OpenStack Cloud Crowbar 8 A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus increase their privileges on the host. CVE-2013-2016 SUSE Linux Enterprise Desktop 11 SP3:kvm-1.4.2-0.11.1 SUSE Linux Enterprise Server 11 SP3:kvm-1.4.2-0.11.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:kvm-1.4.2-0.11.1 SUSE Linux Enterprise Server 11 SP4:kvm-1.4.2-30.5 SUSE Linux Enterprise Server for SAP Applications 11 SP3:kvm-1.4.2-0.11.1 HPE Helion OpenStack 8:qemu HPE Helion OpenStack 8:qemu-block-curl HPE Helion OpenStack 8:qemu-block-iscsi HPE Helion OpenStack 8:qemu-block-rbd HPE Helion OpenStack 8:qemu-block-ssh HPE Helion OpenStack 8:qemu-guest-agent HPE Helion OpenStack 8:qemu-ipxe HPE Helion OpenStack 8:qemu-kvm HPE Helion OpenStack 8:qemu-lang HPE Helion OpenStack 8:qemu-seabios HPE Helion OpenStack 8:qemu-sgabios HPE Helion OpenStack 8:qemu-tools HPE Helion OpenStack 8:qemu-vgabios HPE Helion OpenStack 8:qemu-x86 SUSE Linux Enterprise Server 12 SP3-BCL:qemu SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86 SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-arm SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-block-curl SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-block-iscsi SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-block-rbd SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-block-ssh SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-guest-agent SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-ipxe SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-kvm SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-lang SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-seabios SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-sgabios SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-tools SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-vgabios SUSE Linux Enterprise Server 12 SP3-ESPOS:qemu-x86 SUSE Linux Enterprise Server 12 SP3-LTSS:qemu SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390 SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86 SUSE Linux Enterprise Server Teradata 12 SP3:qemu SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86 SUSE OpenStack Cloud 8:qemu SUSE OpenStack Cloud 8:qemu-block-curl SUSE OpenStack Cloud 8:qemu-block-iscsi SUSE OpenStack Cloud 8:qemu-block-rbd SUSE OpenStack Cloud 8:qemu-block-ssh SUSE OpenStack Cloud 8:qemu-guest-agent SUSE OpenStack Cloud 8:qemu-ipxe SUSE OpenStack Cloud 8:qemu-kvm SUSE OpenStack Cloud 8:qemu-lang SUSE OpenStack Cloud 8:qemu-seabios SUSE OpenStack Cloud 8:qemu-sgabios SUSE OpenStack Cloud 8:qemu-tools SUSE OpenStack Cloud 8:qemu-vgabios SUSE OpenStack Cloud 8:qemu-x86 SUSE OpenStack Cloud Crowbar 8:qemu SUSE OpenStack Cloud Crowbar 8:qemu-block-curl SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent SUSE OpenStack Cloud Crowbar 8:qemu-ipxe SUSE OpenStack Cloud Crowbar 8:qemu-kvm SUSE OpenStack Cloud Crowbar 8:qemu-lang SUSE OpenStack Cloud Crowbar 8:qemu-seabios SUSE OpenStack Cloud Crowbar 8:qemu-sgabios SUSE OpenStack Cloud Crowbar 8:qemu-tools SUSE OpenStack Cloud Crowbar 8:qemu-vgabios SUSE OpenStack Cloud Crowbar 8:qemu-x86 important 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H