NVD

Id
35326  
Name
CVE-2014-8106  
Description
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-08  
Modified Date
2017-01-02  
Seq
2014-8106  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180917 35326 CVE-2014-8106 http://git.qemu.org/?p=qemu.git;a=commit;h=bf25983345ca44aec3dd92c57142be45452bd38a  View
180918 35326 CVE-2014-8106 http://git.qemu.org/?p=qemu.git;a=commit;h=d3532a0db02296e687711b8cdc7791924efccea0  View
180919 35326 CVE-2014-8106 FEDORA-2015-5482  View
180920 35326 CVE-2014-8106 [Qemu-devel] 20141204 [PULL for-2.2 0/2] cirrus: fix blit region check (cve-2014-8106)  View
180921 35326 CVE-2014-8106 RHSA-2015:0349  View
180922 35326 CVE-2014-8106 RHSA-2015:0624  View
180923 35326 CVE-2014-8106 RHSA-2015:0643  View
180924 35326 CVE-2014-8106 RHSA-2015:0795  View
180925 35326 CVE-2014-8106 RHSA-2015:0867  View
180926 35326 CVE-2014-8106 RHSA-2015:0868  View
180927 35326 CVE-2014-8106 RHSA-2015:0891  View
180928 35326 CVE-2014-8106 http://support.citrix.com/article/CTX200892  View
180929 35326 CVE-2014-8106 DSA-3087  View
180930 35326 CVE-2014-8106 DSA-3088  View
180931 35326 CVE-2014-8106 [oss-security] 20141204 CVE-2014-8106 qemu: cirrus: insufficient blit region checks  View
180932 35326 CVE-2014-8106 71477  View
180933 35326 CVE-2014-8106 qemu-cve20148106-sec-bypass(99126)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16948 JVNDB-2014-005823 QEMU の Cirrus VGA エミュレータにおけるヒープベースのバッファオーバーフローの脆弱性 QEMU の Cirrus VGA エミュレータ (hw/display/cirrus_vga.c) には、ブリット (blit) 領域に関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-8106 75399 CVE-2014-8106 35326 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005823.html 2014-12-01 2015-06-04 View