NVD

Id
35133  
Name
CVE-2014-7840  
Description
The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-12  
Modified Date
2016-08-31  
Seq
2014-7840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
179822 35133 CVE-2014-7840 http://git.qemu.org/?p=qemu.git;a=commit;h=0be839a2701369f669532ea5884c15bead1c6e08  View
179823 35133 CVE-2014-7840 RHSA-2015:0349  View
179824 35133 CVE-2014-7840 RHSA-2015:0624  View
179825 35133 CVE-2014-7840 [qemu-devel] 20141112 [PATCH 0/4] migration: fix CVE-2014-7840  View
179826 35133 CVE-2014-7840 qemu-cve20147840-code-exec(99194)  View
179827 35133 CVE-2014-7840 https://bugzilla.redhat.com/show_bug.cgi?id=1163075  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
17119 JVNDB-2014-005994 QEMU の arch_init.c 内の host_from_stream_offset 関数における任意のコードを実行される脆弱性 QEMU の arch_init.c 内の host_from_stream_offset 関数には、マイグレーション中に RAM をロードする際、任意のコードを実行される脆弱性が存在します。 CVE-2014-7840 75133 CVE-2014-7840 35133 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005994.html 2014-11-18 2014-12-16 View