CVE

Id
70929  
CVE No.
CVE-2014-3633  
Status
Candidate  
Description
The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.  
Phase
Assigned (20140514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
675606 70929 CVE-2014-3633 CONFIRM:http://libvirt.org/git/?p=libvirt.git;a=commitdiff;h=3e745e8f775dfe6f64f18b5c2fe4791b35d3546b  View
675607 70929 CVE-2014-3633 CONFIRM:http://security.libvirt.org/2014/0004.html  View
675608 70929 CVE-2014-3633 DEBIAN:DSA-3038  View
675609 70929 CVE-2014-3633 URL:http://www.debian.org/security/2014/dsa-3038  View
675610 70929 CVE-2014-3633 GENTOO:GLSA-201412-04  View
675611 70929 CVE-2014-3633 URL:http://security.gentoo.org/glsa/glsa-201412-04.xml  View
675612 70929 CVE-2014-3633 REDHAT:RHSA-2014:1352  View
675613 70929 CVE-2014-3633 URL:http://rhn.redhat.com/errata/RHSA-2014-1352.html  View
675614 70929 CVE-2014-3633 SUSE:openSUSE-SU-2014:1290  View
675615 70929 CVE-2014-3633 URL:http://lists.opensuse.org/opensuse-updates/2014-10/msg00014.html  View
675616 70929 CVE-2014-3633 SUSE:openSUSE-SU-2014:1293  View
675617 70929 CVE-2014-3633 URL:http://lists.opensuse.org/opensuse-updates/2014-10/msg00017.html  View
675618 70929 CVE-2014-3633 UBUNTU:USN-2366-1  View
675619 70929 CVE-2014-3633 URL:http://www.ubuntu.com/usn/USN-2366-1  View
675620 70929 CVE-2014-3633 SECUNIA:60291  View
675621 70929 CVE-2014-3633 URL:http://secunia.com/advisories/60291  View
675622 70929 CVE-2014-3633 SECUNIA:60895  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15740 JVNDB-2014-004615 OpenStack Cinder の GlusterFS および Linux Smbfs ドライバにおける Cinder-volume ホストからファイルデータを取得される脆弱性 OpenStack Cinder の (1) GlusterFS および (2) Linux Smbfs ドライバには、Cinder-volume ホストからファイルデータを取得される脆弱性が存在します。 CVE-2014-3641 70929 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004615.html  View