PT-2014-3500 · Qemu+5 · Qemu+5
Kevin Wolf
·
Publicado
2014-03-26
·
Atualizado
2024-06-15
·
CVE-2014-0145
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
QEMU versions prior to 1.7.2
QEMU versions 2.x prior to 2.0.0
Description
The issue is related to multiple buffer overflows, allowing local users to cause a denial of service (crash) or possibly execute arbitrary code. This can be achieved via a large L1 table in the
qcow2 snapshot load tmp function in the QCOW 2 block driver, or through an uncompressed chunk, chunk length, or number of sectors in the DMG block driver.Recommendations
For QEMU versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue.
For QEMU versions 2.x prior to 2.0.0, update to version 2.0.0 or later to resolve the issue.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu