Qemu · Qemu · CVE-2014-0145
**Name of the Vulnerable Software and Affected Versions**
QEMU versions prior to 1.7.2
QEMU versions 2.x prior to 2.0.0
**Description**
The issue is related to multiple buffer overflows, allowing local users to cause a denial of service (crash) or possibly execute arbitrary code. This can be achieved via a large L1 table in the `qcow2 snapshot load tmp` function in the QCOW 2 block driver, or through an uncompressed chunk, chunk length, or number of sectors in the DMG block driver.
**Recommendations**
For QEMU versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue.
For QEMU versions 2.x prior to 2.0.0, update to version 2.0.0 or later to resolve the issue.