CVE-2014-0148

Katalog CVE

CVSS 5.5 · Medium EPSS 0,30%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada qemu, redhat virtualization +7 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.

Rincian

Terbit di NVD

29 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2014/03/26/8 mailing list · patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1078212 issue tracking · patch · advisory pihak ketiga
• https://lists.gnu.org/archive/html/qemu-devel/2014-03/msg04994.html mailing list · patch · advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2014-0420.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2014-0421.html advisory pihak ketiga
• http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1d7678dec4761acdc43439da6ceda41a703ba1a6