CVE-2014-3471

Опубликовано: 12 янв. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio block devices.

Ссылки

http://security.gentoo.org/glsa/glsa-201412-01.xml
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/23/4
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/68145
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1112271
Issue Tracking
Patch
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2014-06/msg05283.html
Patch
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201412-01.xml
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/23/4
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/68145
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1112271
Issue Tracking
Patch
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2014-06/msg05283.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.1.2 (включая)

Конфигурация 2

cpe:2.3:a:qemu:qemu:2.1.2:r1:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00396

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2014-3471

CVSS3: 5.5

ubuntu

больше 8 лет назад

CVE-2014-3471

redhat

около 12 лет назад

CVE-2014-3471

CVSS3: 5.5

debian

больше 8 лет назад

Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emula ...

GHSA-hfch-73vm-jx9g

CVSS3: 5.5

github

больше 4 лет назад

EPSS

Процентиль: 33%

0.00396

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-416