CVE

Id
72560  
CVE No.
CVE-2014-5263  
Status
Candidate  
Description
vmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATE_END_OF_LIST macro, which allows attackers to cause a denial of service (out-of-bounds access, infinite loop, and memory corruption) and possibly gain privileges via unspecified vectors.  
Phase
Assigned (20140815)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
684923 72560 CVE-2014-5263 MLIST:[oss-security] 20140804 CVE Request -- qemu: missing field list terminator in vmstate_xhci_event  View
684924 72560 CVE-2014-5263 URL:http://www.openwall.com/lists/oss-security/2014/08/04/1  View
684925 72560 CVE-2014-5263 MLIST:[oss-security] 20140815 Re: CVE Request -- qemu: missing field list terminator in vmstate_xhci_event  View
684926 72560 CVE-2014-5263 URL:http://www.openwall.com/lists/oss-security/2014/08/16/1  View
684927 72560 CVE-2014-5263 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1126543  View
684928 72560 CVE-2014-5263 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commitdiff;h=3afca1d6d413592c2b78cf28f52fa24a586d8f56  View
684929 72560 CVE-2014-5263 UBUNTU:USN-2409-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16327 JVNDB-2014-005202 FFMpeg および Libav におけるヒープベースのバッファオーバーフローの脆弱性 FFMpeg および Libav の libavcodec/proresenc_kostya.c の encode_slice 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-5271 72560 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005202.html  View