CVE-2014-3633
En bref Sévérité Non disponible EPSS EPSS 2.75 % · centile 86 (2026-10-28) État PUBLISHED Publiée 2014-10-06 Mise à jour 2024-08-06 Attribuée par redhat Statut NVD Modified Description The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.
Scores Version Score Vecteur Évalué par CVSS 2.0 MEDIUM 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:canonical:ubuntu_linux:10.04:*:lts:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.04:*:lts:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*cpe:2.3:a:libvirt:libvirt:*:*:*:*:*:*:*:* ≤ 1.2.8cpe:2.3:a:libvirt:libvirt:1.2.0:*:*:*:*:*:*:*cpe:2.3:a:libvirt:libvirt:1.2.1:*:*:*:*:*:*:*cpe:2.3:a:libvirt:libvirt:1.2.2:*:*:*:*:*:*:*cpe:2.3:a:libvirt:libvirt:1.2.3:*:*:*:*:*:*:*cpe:2.3:a:libvirt:libvirt:1.2.4:*:*:*:*:*:*:*cpe:2.3:a:libvirt:libvirt:1.2.5:*:*:*:*:*:*:*cpe:2.3:a:libvirt:libvirt:1.2.6:*:*:*:*:*:*:*cpe:2.3:a:libvirt:libvirt:1.2.7:*:*:*:*:*:*:*Produits affectés Produit Versions affected n/a
Références
Sources
