PT-2014-5431 · Qemu+5 · Qemu+5

Published 2014-09-30 · Updated 2024-06-15 · CVE-2014-3640

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.1.2

Description The issue allows local users to cause a denial of service by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket. This is due to a problem in the sosendto function in slirp/udp.c.

Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the sosendto function in slirp/udp.c to minimize the risk of exploitation.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2014-2221

CESA-2015_0349

CVE-2014-3640

DSA-3044-1

DSA-3045-1

MGASA-2014-0426

OPENSUSE-SU-2024:10196-1

RHSA-2015:0349

RHSA-2015:0624

RHSA-2015_0349

SUSE-SU-2015:0357-1

SUSE-SU-2016:0873-1

SUSE-SU-2016:0955-1

SUSE-SU-2016:1154-1

SUSE-SU-2016:1318-1

SUSE-SU-2016:1745-1

USN-2409-1

Affected Products

Alt Linux

Centos

Qemu

Red Hat

Suse

Ubuntu

References · 287

• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0873-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1745-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5263 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-3640 · Security Note
• https://ubuntu.com/security/CVE-2014-3689 · Vendor Advisory
• http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04598.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0426 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07329 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7815 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-3640 · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7840 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-3640 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2409-1 · Vendor Advisory