cbcvebase.
CVE-2014-3672
published 2016-05-25

CVE-2014-3672: The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout…

medium6.5CVSS 3.0
AVLACLPRLUINSCCNINAH
The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.

Affected

6 ranges
VendorProductVersion rangeFixed in
debianxen< xen 4.4.0-1 (bookworm)xen 4.4.0-1 (bookworm)
redhatlibvirt<= 1.2.21
xenxen>= 0 < 4.4.0-14.4.0-1
xenxen>= 0 < 4.4.0-14.4.0-1
xenxen>= 0 < 4.4.0-14.4.0-1
xenxen>= 0 < 4.4.0-14.4.0-1

CVSS provenance

nvdv3.06.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
osv6.5MEDIUM