CVE-2014-0148

published 2022-09-29

CVE-2014-0148: Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing…

Priority P4 21 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
debian	qemu	< qemu 2.0.0+dfsg-1 (bookworm)	qemu 2.0.0+dfsg-1 (bookworm)
qemu	qemu	< 2.0.0	2.0.0
qemu	qemu	—	—
qemu	qemu	>= 0 < 2.0.0+dfsg-1	2.0.0+dfsg-1
qemu	qemu	>= 0 < 2.0.0+dfsg-1	2.0.0+dfsg-1
qemu	qemu	>= 0 < 2.0.0+dfsg-1	2.0.0+dfsg-1
qemu	qemu	>= 0 < 2.0.0+dfsg-1	2.0.0+dfsg-1
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_eus	—	—
redhat	enterprise_linux_openstack_platform	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_server_aus	—	—
redhat	enterprise_linux_server_tus	—	—
redhat	enterprise_linux_workstation	—	—
redhat	virtualization	—	—

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-835