CVE-2013-4377: Qemu

Low severity, CVSS 2.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.

Affected products

• Qemu Qemu: version 1.4.0 only; version 1.4.1 only; version 1.4.2 only; version 1.5.0 only; version 1.5.1 only; version 1.5.2 only; …

Published 2013-10-11. Last modified 2026-06-16.