Published: 08/12/2014 Updated: 13/02/2023

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU prior to 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu 2.1.0
qemu qemu 2.1.1
qemu qemu

Debian Bug report logs - #772025 CVE-2014-8106: cirrus: insufficient blit region checks Packages: qemu-system, qemu-kvm; Maintainer for qemu-system is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu-system is src:qemu (PTS, buildd, popcon) Maintainer for qemu-kvm is Debian QEMU Team <pkg-qemu-devel@lis ...

Several security issues were fixed in QEMU ...

Paolo Bonzini of Red Hat discovered that the blit region checks were insufficient in the Cirrus VGA emulator in qemu, a fast processor emulator A privileged guest user could use this flaw to write into qemu address space on the host, potentially escalating their privileges to those of the qemu host process For the stable distribution (wheezy), th ...

Paolo Bonzini of Red Hat discovered that the blit region checks were insufficient in the Cirrus VGA emulator in qemu-kvm, a full virtualization solution on x86 hardware A privileged guest user could use this flaw to write into qemu address space on the host, potentially escalating their privileges to those of the qemu host process For the stable ...

CWE-119 http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html http://www.securityfocus.com/bid/71477 http://www.debian.org/security/2014/dsa-3088 http://www.openwall.com/lists/oss-security/2014/12/04/8 http://www.debian.org/security/2014/dsa-3087 http://secunia.com/advisories/60364 http://rhn.redhat.com/errata/RHSA-2015-0643.html http://rhn.redhat.com/errata/RHSA-2015-0349.html http://rhn.redhat.com/errata/RHSA-2015-0624.html http://rhn.redhat.com/errata/RHSA-2015-0795.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html http://support.citrix.com/article/CTX200892 http://rhn.redhat.com/errata/RHSA-2015-0891.html http://rhn.redhat.com/errata/RHSA-2015-0868.html http://rhn.redhat.com/errata/RHSA-2015-0867.html https://exchange.xforce.ibmcloud.com/vulnerabilities/99126 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d3532a0db02296e687711b8cdc7791924efccea0 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772025 https://usn.ubuntu.com/2439-1/https://nvd.nist.gov

CVE-2014-8106

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect