Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-0147

Опубликовано: 26 мар. 2014
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kvmWill not fix
Red Hat Enterprise Linux 7qemu-kvmNot affected
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)qemu-kvm-rhevAffected
OpenStack 3 for RHEL 6qemu-kvm-rhevFixedRHSA-2014:043524.04.2014
OpenStack 4 for RHEL 6qemu-kvm-rhevFixedRHSA-2014:043424.04.2014
Red Hat Enterprise Linux 6qemu-kvmFixedRHSA-2014:042022.04.2014
RHEV 3.X Hypervisor and Agents for RHEL-6qemu-kvm-rhevFixedRHSA-2014:042122.04.2014
RHEV 3.X Hypervisor and Agents for RHEL-6rhev-hypervisor6FixedRHSA-2014:067409.06.2014

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1078848Qemu: block: possible crash due signed types or logic error

EPSS

Процентиль: 16%
0.00051
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 6.2
ubuntu
больше 2 лет назад

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.

CVSS3: 6.2
nvd
больше 2 лет назад

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.

CVSS3: 6.2
debian
больше 2 лет назад

Qemu before 1.6.2 block diver for the various disk image formats used ...

CVSS3: 6.2
github
больше 2 лет назад

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.

oracle-oval
около 11 лет назад

ELSA-2014-0420: qemu-kvm security update (MODERATE)

EPSS

Процентиль: 16%
0.00051
Низкий

4.3 Medium

CVSS2