QEMU 'vhdx' Block Driver Local Denial of Service Vulnerability
BID:66480
Info
QEMU 'vhdx' Block Driver Local Denial of Service Vulnerability
| Bugtraq ID: | 66480 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2014-0148 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 26 2014 12:00AM |
| Updated: | Apr 13 2015 09:24PM |
| Credit: | Jeff Cody of Red Hat |
| Vulnerable: |
Redhat OpenStack 4.0 Redhat OpenStack 3.0 Redhat Enterprise Virtualization Manager 0 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 6 QEMU QEMU 0 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 CentOS CentOS 6 |
| Not Vulnerable: | |
Discussion
QEMU 'vhdx' Block Driver Local Denial of Service Vulnerability
QEMU is prone to a local denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, denying service to legitimate users.
QEMU is prone to a local denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, denying service to legitimate users.
Solution / Fix
QEMU 'vhdx' Block Driver Local Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva lib64usbredirhost-devel-0.7-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64usbredirhost1-0.7-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64usbredirparser-devel-0.7-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64usbredirparser1-0.7-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva qemu-1.6.2-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva qemu-img-1.6.2-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva usbredir-0.7-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva usbredir-devel-0.7-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
QEMU 'vhdx' Block Driver Local Denial of Service Vulnerability
References:
References:
- [Qemu-devel] [PATCH for-2.0 00/47] block: image format input validation (QEMU)
- CVE-2014-0148 Qemu: vhdx: bounds checking for block_size and logical_sector_size (Red Hat)
- CVE-2014-0148 Qemu: vhdx: bounds checking for block_size and logical_sector_size (Red Hat Bugzilla)
- ELSA-2014-0420 - qemu-kvm security update (Oracle)