CVE-2014-0147

Опубликовано: 29 сент. 2022

Источник: nvd

CVSS3: 6.2

EPSS Низкий

Описание

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.

Ссылки

http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=246f65838d19db6db55bfb41117c35645a2c4789
http://rhn.redhat.com/errata/RHSA-2014-0420.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0421.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/26/8
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1078848
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1086717
Issue Tracking
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=246f65838d19db6db55bfb41117c35645a2c4789
http://rhn.redhat.com/errata/RHSA-2014-0420.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0421.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/26/8
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1078848
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1086717
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 1.6.2 (исключая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_openstack_platform:5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00051

Низкий

6.2 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2014-0147

CVSS3: 6.2

ubuntu

больше 2 лет назад

CVE-2014-0147

redhat

около 11 лет назад

CVE-2014-0147

CVSS3: 6.2

debian

больше 2 лет назад

Qemu before 1.6.2 block diver for the various disk image formats used ...

GHSA-gx9j-r5m2-p97g

CVSS3: 6.2

github

больше 2 лет назад

ELSA-2014-0420

oracle-oval

около 11 лет назад

ELSA-2014-0420: qemu-kvm security update (MODERATE)

EPSS

Процентиль: 16%

0.00051

Низкий

6.2 Medium

CVSS3

Дефекты

CWE-190