CVE-2014-0148
Medium
Description
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Qemu
PublishedSep 29, 2022
First seenSep 29, 2022
How to fix
Update
- qemu qemu2.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qemu qemu | v < 2.0.0 | 2.0.0 |
| redhat virtualization | 3.0 | — |
| redhat enterprise_linux_desktop | 6.0 | — |
| redhat enterprise_linux_eus | 6.5 | — |
| redhat enterprise_linux_openstack_platform | 5 | — |
| redhat enterprise_linux_server | 6.0 | — |
| redhat enterprise_linux_server_aus | 6.5 | — |
| redhat enterprise_linux_server_tus | 6.5 | — |
| redhat enterprise_linux_workstation | 6.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.