NVD

Id
31216  
Name
CVE-2014-2894  
Description
Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-04-23  
Modified Date
2014-11-13  
Seq
2014-2894  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163711 31216 CVE-2014-2894 RHSA-2014:0743  View
163712 31216 CVE-2014-2894 RHSA-2014:0744  View
163713 31216 CVE-2014-2894 [oss-security] 20140415 CVE request Qemu: out of bounds buffer access, guest triggerable via IDE SMART  View
163714 31216 CVE-2014-2894 [oss-security] 20140418 Re: CVE request Qemu: out of bounds buffer access, guest triggerable via IDE SMART  View
163715 31216 CVE-2014-2894 66932  View
163716 31216 CVE-2014-2894 USN-2182-1  View
163717 31216 CVE-2014-2894 [Qemu-devel] 20140412 [PATCH for 2.0] ide: Correct improper smart self test c  View
163718 31216 CVE-2014-2894 [Qemu-devel] 20140414 Re: [PATCH for 2.0] ide: Correct improper smart self test c  View
163719 31216 CVE-2014-2894 [Qemu-devel] 20140414 Re: [PATCH for 2.0] ide: Correct improper smart self test c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13370 JVNDB-2014-002245 QEMU の hw/ide/core.c における脆弱性 QEMU の hw/ide/core.c の smart self test の cmd_smart 関数には、一つずれエラー (Off-by-One error) により、不特定の影響を受ける脆弱性が存在します。 CVE-2014-2894 70181 CVE-2014-2894 31216 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002245.html 2014-04-17 2014-11-26 View