CVE-2014-0223

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service crash and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read...

Integer overflow

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service crash and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read...

Integer overflow

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service crash via a large L2 table in a QCOW version 1 image...

CVE-2014-0222

CVE-2014-0222 affects QEMU’s qcow_open() in block/qcow.c, where an integer overflow can be triggered by a large L2 table in a QCOW version 1 image, enabling a remote crash/DoS. Public disclosures reference QEMU up to version 1.7.2 as affected; fixes patch or upgrade to a later QEMU release (1.7.2...