Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-8106HistoryDec 08, 2014 - 4:59 p.m.
CVE-2014-8106
2014-12-0816:59:01
Debian Security Bug Tracker
security-tracker.debian.org
14
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
41.6%
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | qemu | < 2.1+dfsg-9 | qemu_2.1+dfsg-9_all.deb |
| Debian | 11 | all | qemu | < 2.1+dfsg-9 | qemu_2.1+dfsg-9_all.deb |
| Debian | 999 | all | qemu | < 2.1+dfsg-9 | qemu_2.1+dfsg-9_all.deb |
| Debian | 13 | all | qemu | < 2.1+dfsg-9 | qemu_2.1+dfsg-9_all.deb |
Related
cve
cve
nvd
nvd
prion
prion
ubuntucve
ubuntucve
cvelist
cvelist
openvas
openvas
CentOS Update for qemu-guest-agent CESA-2015:0867 centos6
2015-04-23 00:00:00
Oracle: Security Advisory (ELSA-2015-0867)
2015-10-06 00:00:00
Debian Security Advisory DSA 3088-1 (qemu-kvm - security update)
2014-12-04 00:00:00
debian
debian
[SECURITY] [DSA 3088-1] qemu-kvm security update
2014-12-04 13:44:52
[SECURITY] [DSA 3087-1] qemu security update
2014-12-04 13:44:23
[SECURITY] [DSA 3087-1] qemu security update
2014-12-04 13:44:23
redhat
redhat
(RHSA-2015:0868) Important: qemu-kvm-rhev security and bug fix update
2015-04-21 00:00:00
(RHSA-2015:0867) Important: qemu-kvm security and bug fix update
2015-04-21 00:00:00
(RHSA-2015:0795) Important: qemu-kvm-rhev security update
2015-04-09 00:00:00
osv
osv
qemu-kvm - security update
2014-12-04 00:00:00
qemu - security update
2014-12-04 00:00:00
xen-3.0
2007-10-05 00:00:00
nessus
nessus
RHEL 6 : qemu-kvm-rhev (RHSA-2015:0868)
2015-04-24 00:00:00
RHEL 6 : qemu-kvm (RHSA-2015:0867)
2015-04-22 00:00:00
Oracle Linux 6 : qemu-kvm (ELSA-2015-0867)
2015-04-22 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:05:03
Buffer Overflows
2020-04-10 00:15:34
centos
centos
qemu security update
2015-04-22 09:45:47
xen security update
2007-10-03 06:01:12
libcacard, qemu security update
2015-03-17 13:29:43
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2015-04-21 00:00:00
Important: xen security update
2007-10-02 00:00:00
qemu-kvm security, bug fix, and enhancement update
2015-03-11 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: kvm-60-6.fc8
2008-05-29 02:49:33
[SECURITY] Fedora 9 Update: kvm-65-7.fc9
2008-05-29 02:33:45
[SECURITY] Fedora 10 Update: kvm-74-6.fc10
2008-11-22 16:51:25
securityvulns
securityvulns
[SECURITY] [DSA 3087-1] qemu security update
2014-12-08 00:00:00
[SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities
2007-10-06 00:00:00
qemu multiple security vulnerabilities
2014-12-08 00:00:00
debiancve
debiancve
CVE-2007-1320
2007-05-02 17:19:00
CVE-2008-4539
2008-12-29 15:24:23
f5
f5
K63519101 : Multiple QEMU vulnerabilities
2016-02-16 00:00:00
SOL63519101 - Multiple QEMU vulnerabilities
2016-02-16 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2014-12-11 00:00:00
freebsd
freebsd
qemu -- Heap overflow in Cirrus emulation
2008-11-01 00:00:00
qemu -- several vulnerabilities
2007-05-01 00:00:00
mageia
mageia
Updated qemu packages fix security vulnerabilities
2014-12-13 23:16:05
gentoo
gentoo
QEMU: Multiple Vulnerabilities
2014-12-24 00:00:00
suse
suse
Security update for xen (important)
2017-03-17 12:10:10
Security update for xen (important)
2017-03-01 00:33:56
Security update for xen (important)
2017-03-10 00:07:36
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
41.6%
Related for DEBIANCVE:CVE-2014-8106