CVE-2007-2894
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system...
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
Exploit likelihood
What each source reports
NVD Score used
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
- Record
CVE-2007-2894- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
- Record
CVE-2007-2894- Updated
- 2026-11-02
EUVDEUVD-2007-2886 No score
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
- Record
EUVD-2007-2886- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f2jw-776x-83xf No score
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system...
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
- Record
GHSA-f2jw-776x-83xf- Updated
- 2026-11-02
OSV No score
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
- Record
CVE-2007-2894- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2894 No score
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
- Record
DEBIAN-CVE-2007-2894- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bochsDebian:12 |
All versions, plus listed versions 2.7+dfsg-42.7+dfsg-4+deb12u12.8+dfsg-12.8+dfsg-23.0+dfsg-13.1+dfsg-1 |
None known |
bochsDebian:13 |
All versions, plus listed versions 3.0+dfsg-13.1+dfsg-1 |
None known |
bochsDebian:14 |
All versions, plus listed versions 3.0+dfsg-13.1+dfsg-1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Bochs 2.3 - Buffer Overflow (Denial of Service) (PoC) | 2007-05-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2894 is a low vulnerability (CVSS 2.1) in Bochs Project Bochs, published May 30, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.73%, the 54th percentile. No source names a fixed version.