CVE-2014-0148

CWE-8358 documents7 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 69.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 29
Latest updateSep 30

Description

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages8 packages

NVDqemu/qemu< 2.0.0
Debianqemu< 2.0.0+dfsg-1+3
CVEListV5qemubefore 2.0

Also affects: Enterprise Linux 6.5

Patches

🔴Vulnerability Details

3
GHSA
GHSA-jh89-xppm-m3xg: Qemu before 22022-09-30
OSV
CVE-2014-0148: Qemu before 22022-09-29
CVEList
CVE-2014-0148: Qemu before 22020-02-11

📋Vendor Advisories

2
Red Hat
Qemu: vhdx: bounds checking for block_size and logical_sector_size2014-03-26
Debian
CVE-2014-0148: qemu - Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite l...2014

💬Community

2
Bugzilla
CVE-2014-0148 Qemu: vhdx: bounds checking for block_size and logical_sector_size [fedora-all]2014-04-11
Bugzilla
CVE-2014-0148 Qemu: vhdx: bounds checking for block_size and logical_sector_size2014-03-19