CVE-2014-0142

MEDIUM

QEMU < 2.0.0 - Denial of Service via Zero Value in Tracks or Extent Size Field

Title source: llm
STIX 2.1

Description

QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.

References (6)

Core 6
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0420.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0421.html
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1078201
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-3044

Scores

CVSS v3 5.5
EPSS 0.0011
EPSS Percentile 29.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-369
Status published
Products (1)
qemu/qemu < 2.0.0
Published Aug 10, 2017
Tracked Since Feb 18, 2026