Vulnerability in Qemu

CVE-2014-0222

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.

EPSS: 0.021 (79.9th percentile) — read the EPSS interpretation.

Affected products

Qemu — versions 0.1.0, 0.1.1, 0.1.2
Suse Linux_enterprise_server — versions 11.0
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)