CVE-2014-5388

QEMU < 2.1.3 - Off-by-one Error in ACPI PCI Hotplug Interface

Title source: llm
STIX 2.1

Description

Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.

References (6)

Core 6
Core References
Patch, Third Party Advisory mailing-list x_refsource_mlist
https://lists.gnu.org/archive/html/qemu-devel/2014-08/msg03338.html
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2014/q3/438
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2014/q3/440
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1132956
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2409-1

Scores

EPSS 0.0039
EPSS Percentile 31.0%

Details

CWE
CWE-193
Status published
Products (5)
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 14.10
qemu/qemu < 2.1.3
Published Nov 15, 2014
Tracked Since Feb 18, 2026