PT-2014-1284 · Qemu+5 · Qemu+5

Published 2014-04-18 · Updated 2024-06-15 · CVE-2014-0150

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:A/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions QEMU versions 2.0 and earlier

Description The issue is related to an integer overflow in the virtio net handle mac function, which can be triggered by a MAC addresses table update request. This leads to a heap-based buffer overflow, allowing local guest users to execute arbitrary code. The vulnerability can also cause a denial of service or allow users to disrupt the integrity of the host operating system's dynamic memory.

Recommendations For QEMU versions 2.0 and earlier, consider disabling the virtio net handle mac function as a temporary workaround until a patch is available. Restrict access to the hw/net/virtio-net.c module to minimize the risk of exploitation. Avoid using the MAC addresses table update request in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2014-1987

BDU:2015-00048

CESA-2014_0420

CVE-2014-0150

DSA-2909-1

DSA-2910-1

MGASA-2014-0426

OPENSUSE-SU-2024:10233-1

RHSA-2014:0420

RHSA-2014:0421

RHSA-2014:0434

RHSA-2014:0435

RHSA-2014:0674

RHSA-2014_0420

SUSE-SU-2014_0816-1

SUSE-SU-2015:0870-1

SUSE-SU-2015:0889-1

SUSE-SU-2015:1152-1

USN-2182-1

Affected Products

Alt Linux

Centos

Qemu

Red Hat

Suse

Ubuntu

References · 156

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4544 · Security Note
• https://bdu.fstec.ru/vul/2015-00048 · Security Note
• https://bdu.fstec.ru/vul/2021-04590 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0147 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0144 · Security Note
• https://osv.dev/vulnerability/USN-2182-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0142 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0145 · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0426 · Vendor Advisory
• http://secunia.com/advisories/57878 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0150 · Security Note
• https://osv.dev/vulnerability/CVE-2014-0150 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5239 · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2182-1 · Vendor Advisory