PT-2014-3502 · Qemu+5 · Qemu+5

Publicado

2013-11-29

·

Atualizado

2024-06-15

·

CVE-2014-0147

CVSS v3.1

6.2

Média

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Qemu versions prior to 1.6.2
Description The issue is related to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots. This leads to incorrectly calling the update refcount() routine, potentially causing the program to crash.
Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue. As a temporary workaround, consider avoiding the creation of QCOW2 snapshots until a patch is available.

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2013-1219
CESA-2014_0420
CVE-2014-0147
DSA-3044-1
DSA-3045-1
MGASA-2014-0426
OPENSUSE-SU-2024:10233-1
RHSA-2014:0420
RHSA-2014:0421
RHSA-2014:0434
RHSA-2014:0435
RHSA-2014:0674
RHSA-2014_0420
SUSE-SU-2015:0870-1
SUSE-SU-2015:0889-1
SUSE-SU-2015:1152-1
USN-2342-1

Produtos afetados

Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu