PT-2014-5340 · Qemu+4 · Qemu+4

Published 2014-05-15 · Updated 2023-02-13 · CVE-2014-3461

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions QEMU version 1.6.2

Description The issue allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."

Recommendations For QEMU version 1.6.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CESA-2014_0743

CESA-2014_0927

CVE-2014-3461

MGASA-2014-0426

RHSA-2014:0674

RHSA-2014:0743

RHSA-2014:0744

RHSA-2014:0888

RHSA-2014:0927

RHSA-2014:1268

RHSA-2014_0743

RHSA-2014_0927

SUSE-SU-2015:0870-1

SUSE-SU-2015:0889-1

SUSE-SU-2015:1152-1

USN-2342-1

Affected Products

Centos

Qemu

Red Hat

Suse

Ubuntu

References · 135

• https://ubuntu.com/security/CVE-2014-0182 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0142 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4148 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4526 · Security Note
• https://ubuntu.com/security/CVE-2013-4531 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2342-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4540 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4151 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4531 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4541 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4527 · Security Note
• https://ubuntu.com/security/CVE-2014-0144 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04590 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4538 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-0743.html · Vendor Advisory