NVD

Id
32992  
Name
CVE-2014-5263  
Description
vmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATE_END_OF_LIST macro, which allows attackers to cause a denial of service (out-of-bounds access, infinite loop, and memory corruption) and possibly gain privileges via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-08-26  
Modified Date
2014-11-18  
Seq
2014-5263  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173177 32992 CVE-2014-5263 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=3afca1d6d413592c2b78cf28f52fa24a586d8f56  View
173178 32992 CVE-2014-5263 [oss-security] 20140804 CVE Request -- qemu: missing field list terminator in vmstate_xhci_event  View
173179 32992 CVE-2014-5263 [oss-security] 20140815 Re: CVE Request -- qemu: missing field list terminator in vmstate_xhci_event  View
173180 32992 CVE-2014-5263 USN-2409-1  View
173181 32992 CVE-2014-5263 https://bugzilla.redhat.com/show_bug.cgi?id=1126543  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15090 JVNDB-2014-003965 QEMU の hw/usb/hcd-xhci.c の vmstate_xhci_event におけるサービス運用妨害 (DoS) の脆弱性 QEMU の hw/usb/hcd-xhci.c の vmstate_xhci_event は、VMSTATE_END_OF_LIST マクロを含むリストを終了しないため、サービス運用妨害 (領域外のアクセス、無限ループおよびメモリ破損) 状態にされる、および権限を取得される脆弱性が存在します。 CVE-2014-5263 72552 CVE-2014-5263 32992 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003965.html 2014-07-22 2014-08-28 View