CVE-2013-2016

A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus increase their privileges on the host.

• CWE-269

• http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00002.htmlMailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/29/5Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/29/6Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59541Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-2016Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2016Exploit, Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83850Third Party Advisory, VDB Entry
• https://github.com/qemu/qemu/commit/5f5a1318653c08e435cfa52f60b6a712815b659dPatch, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-2016Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00002.htmlMailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/29/5Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/29/6Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59541Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-2016Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2016Exploit, Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83850Third Party Advisory, VDB Entry
• https://github.com/qemu/qemu/commit/5f5a1318653c08e435cfa52f60b6a712815b659dPatch, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-2016Third Party Advisory

Published

Dec 30, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2010WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Cod…9.8
• CVE-2013-2011WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP …8.8
• CVE-2013-2012autojump before 21.5.8 allows local users to gain privileges…7.3
• CVE-2013-2013The user-password-update command in python-keystoneclient be…
• CVE-2013-2014OpenStack Identity (Keystone) before 2013.1 allows remote at…
• CVE-2013-2015The ext4_orphan_del function in fs/ext4/namei.c in the Linux…
• CVE-2013-2017The veth (aka virtual Ethernet) driver in the Linux kernel b…
• CVE-2013-2018Multiple SQL injection vulnerabilities in BOINC allow remote…9.8
• CVE-2013-2019Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 all…
• CVE-2013-2020Integer underflow in the cli_scanpe function in pe.c in Clam…
• CVE-2013-2021pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attacker…
• CVE-2013-2022Multiple cross-site scripting (XSS) vulnerabilities in actio…