CVE-2014-0049

🗓️ 11 Mar 2014 01:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 114 Views🌐 WEB

Buffer overflow in complete_emulated_mmio function, allows guest OS users to execute arbitrary code

Reporter	Title	Published	Views	Family All 210
ALT Linux	Security fix for the ALT Linux 7 package kernel-src-kvm version 3.10.21-alt5	4 Mar 201400:00	–	altlinux
BDU FSTEC	The vulnerability of the Linux operating system allows a malicious individual to trigger a service failure, increase their privileges, or execute arbitrary code.	5 Jul 201600:00	–	bdu_fstec
Cvelist	CVE-2014-0049	11 Mar 201401:00	–	cvelist
Debian CVE	CVE-2014-0049	11 Mar 201401:00	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	19 May 201400:00	–	oraclelinux
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1477)	13 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1482)	13 May 201900:00	–	nessus
Tenable Nessus	Fedora 20 : kernel-3.13.5-202.fc20 (2014-3442)	7 Mar 201400:00	–	nessus
Tenable Nessus	Fedora 19 : kernel-3.13.5-103.fc19 (2014-3448)	10 Mar 201400:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0004)	12 Aug 201900:00	–	nessus

NVD

Node

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
kernel	www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.6
git	www.git.kernel.org/
openwall	www.openwall.com/lists/oss-security/2014/03/03/1
github	www.github.com/torvalds/linux/commit/a08d3b3b99efd509133946056531cdf8f3a0c09b

Parameter	Position	Path	Description	CWE
id	path	/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a08d3b3b	Buffer overflow in complete_emulated_mmio in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancel_work_item data.	CWE-120

17 Jun 2026 00:02Current

6.9Medium risk

Vulners AI Score6.9

CVSS 27.4

EPSS0.00775