Denial Of Service (DoS)

🗓️ 15 Jan 2019 08:59:20Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

qemu-kvm vulnerable to DoS attacks via integer overflow in qcow_open functio

Reporter	Title	Published	Views	Family All 168
IBM Security Bulletins	Security Bulletin: Vulnerabilities in qemu-kvm affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance.	17 Jun 201822:30	–	ibm
Tenable Nessus	CentOS 7 : qemu-kvm (CESA-2014:0927)	26 Jul 201400:00	–	nessus
Tenable Nessus	CentOS 6 : qemu-kvm (CESA-2014:1075)	21 Aug 201400:00	–	nessus
Tenable Nessus	Debian DSA-3044-1 : qemu-kvm - security update	6 Oct 201400:00	–	nessus
Tenable Nessus	Debian DSA-3045-1 : qemu - security update	6 Oct 201400:00	–	nessus
Tenable Nessus	Fedora 20 : qemu-1.6.2-5.fc20 (2014-6288)	19 May 201400:00	–	nessus
Tenable Nessus	Fedora 20 : qemu-1.6.2-6.fc20 (2014-6970)	10 Jun 201400:00	–	nessus
Tenable Nessus	GLSA-201408-17 : QEMU: Multiple vulnerabilities	30 Aug 201400:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : qemu (MDVSA-2014:220)	23 Nov 201400:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : qemu (MDVSA-2015:061)	19 Mar 201500:00	–	nessus

Vulners

Node

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.10

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6_2.5

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.6

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.9

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.5

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.2

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.3

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6_0.8

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.8

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6_0.6

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.3

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.1

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.6

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6_2.4

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.9

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.7

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.8

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.2

kvm_group qemu-kvmMatch0.12.1.2_2.355.el6_4.1

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6

kvm_group qemu-kvmMatch0.12.1.2_2.295.el6_3.5

kvm_group qemu-kvmMatch0.12.1.2_2.113.el6_0.3

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6_1.2

kvm_group qemu-kvmMatch0.12.1.2_2.209.el6_2.1

kvm_group qemu-kvmMatch0.12.1.2_2.160.el6

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.3

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.8

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.5

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.1

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.5

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.351.el6

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.7

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.4

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.2

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.10

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.355.el6_4.9

qemu-kvm-rhev qemu-kvm-rhevMatch0.12.1.2_2.295.el6_3.2

Source	Link
securityfocus	www.securityfocus.com/bid/67357
access	www.access.redhat.com/security/updates/classification/
rhn	www.rhn.redhat.com/errata/RHSA-2014-1075.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
debian	www.debian.org/security/2014/dsa-3044
lists	www.lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2014-June/134053.html
access	www.access.redhat.com/errata/RHSA-2014:0927
access	www.access.redhat.com/errata/RHSA-2014:1075

13 Feb 2023 01:50Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.5

EPSS0.02116