CVE

Id
72685  
CVE No.
CVE-2014-5388  
Status
Candidate  
Description
Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.  
Phase
Assigned (20140822)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
685408 72685 CVE-2014-5388 MLIST:[Qemu-devel] 20140820 [PATCH v2] pcihp: fix possible array out of bounds  View
685409 72685 CVE-2014-5388 URL:https://lists.gnu.org/archive/html/qemu-devel/2014-08/msg03338.html  View
685410 72685 CVE-2014-5388 MLIST:[oss-security] 20140822 CVE request Qemu: out of bounds memory access  View
685411 72685 CVE-2014-5388 URL:http://seclists.org/oss-sec/2014/q3/438  View
685412 72685 CVE-2014-5388 MLIST:[oss-security] 20140822 Re: CVE request Qemu: out of bounds memory access  View
685413 72685 CVE-2014-5388 URL:http://seclists.org/oss-sec/2014/q3/440  View
685414 72685 CVE-2014-5388 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=fa365d7cd11185237471823a5a33d36765454e16  View
685415 72685 CVE-2014-5388 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1132956  View
685416 72685 CVE-2014-5388 UBUNTU:USN-2409-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15057 JVNDB-2014-003932 Schrack Technik microControl のファームウェアの Web インターフェースにおけるアクセス権を取得される脆弱性 Schrack Technik microControl のファームウェアの Web インターフェースは、"ユーザ" アカウント用ではないハードコードされたパスワードを使用するため、アクセス権を取得される脆弱性が存在します。 CVE-2014-5396 72685 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003932.html  View