Published: 23/04/2014 Updated: 13/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU prior to 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu 1.0
qemu qemu 0.12.2
qemu qemu 1.1.1
qemu qemu 0.12.0
qemu qemu
qemu qemu 1.1
qemu qemu 1.6.0
qemu qemu 0.1.6
qemu qemu 1.5.0
qemu qemu 0.13.0
qemu qemu 0.5.3
qemu qemu 0.4.2
qemu qemu 0.10.3
qemu qemu 1.5.3
qemu qemu 1.2.0
qemu qemu 1.3.0
qemu qemu 0.15.2
qemu qemu 0.11.0-rc1
qemu qemu 0.1.5
qemu qemu 1.5.1
qemu qemu 0.5.1
qemu qemu 0.8.2
qemu qemu 0.11.0
qemu qemu 0.5.5
qemu qemu 0.10.1
qemu qemu 0.9.0
qemu qemu 0.7.2
qemu qemu 0.12.5
qemu qemu 0.1.3
qemu qemu 0.14.0
qemu qemu 0.11.1
qemu qemu 1.5.2
qemu qemu 0.7.1
qemu qemu 0.9.1-5
qemu qemu 1.0.1
qemu qemu 1.1.2
qemu qemu 0.15.0
qemu qemu 1.2.2
qemu qemu 0.5.0
qemu qemu 0.14.1
qemu qemu 0.8.1
qemu qemu 0.11.0-rc2
qemu qemu 1.2.1
qemu qemu 0.10.0
qemu qemu 0.15.1
qemu qemu 0.4.1
qemu qemu 1.4.1
qemu qemu 0.5.2
qemu qemu 0.12.3
qemu qemu 0.1.1
qemu qemu 1.4.0
qemu qemu 1.4.2
qemu qemu 0.7.0
qemu qemu 0.1.4
qemu qemu 0.9.1
qemu qemu 0.6.0
qemu qemu 0.6.1
qemu qemu 1.6.2
qemu qemu 0.10.6
qemu qemu 1.6.1
qemu qemu 0.11.0-rc0
qemu qemu 0.4.3
qemu qemu 0.1.2
qemu qemu 0.5.4
qemu qemu 0.12.4
qemu qemu 0.10.5
qemu qemu 0.10.4
qemu qemu 0.10.2
qemu qemu 1.3.1
qemu qemu 0.12.1
qemu qemu 0.8.0
qemu qemu 0.1.0
qemu qemu 0.2.0
qemu qemu 0.3.0
qemu qemu 0.4.0

Several security issues were fixed in QEMU ...

Debian Bug report logs - #745157 guest-triggerable out-of-bounds buffer access via IDE SMART command (CVE-2014-2894) Packages: qemu-kvm, qemu-system; Maintainer for qemu-kvm is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu-kvm is src:qemu (PTS, buildd, popcon) Maintainer for qemu-system is Debian QEMU T ...

Debian Bug report logs - #725944 qemu: CVE-2013-4344 Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 10 Oct 2013 07:42:06 UTC Severity: important Tags: securi ...

Several vulnerabilities were discovered in qemu, a fast processor emulator CVE-2013-4344 Buffer overflow in the SCSI implementation in QEMU, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command CVE-2014-2894 Off-by-one error in th ...

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware CVE-2013-4344 Buffer overflow in the SCSI implementation in QEMU, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command CVE-2014-2894 ...

Off-by-one error in the cmd_smart function in the smart self test in hw/ide/corec in QEMU before 20 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption ...

CWE-189 https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02095.html http://www.openwall.com/lists/oss-security/2014/04/18/5 https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02016.html https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02152.html http://www.openwall.com/lists/oss-security/2014/04/15/4 http://www.securityfocus.com/bid/66932 http://secunia.com/advisories/57945 http://www.ubuntu.com/usn/USN-2182-1 http://secunia.com/advisories/58191 http://rhn.redhat.com/errata/RHSA-2014-0743.html http://rhn.redhat.com/errata/RHSA-2014-0744.html http://rhn.redhat.com/errata/RHSA-2014-0704.html https://usn.ubuntu.com/2182-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-2894

CVE-2014-2894

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect