{"id":"CVE-2014-2894","aliases":["DEBIAN-CVE-2014-2894","DSA-2932-1","DSA-2933-1","EUVD-2014-2917","GHSA-5v9x-x46w-vf3f","RHSA-2014:0674","RHSA-2014:0704","RHSA-2014:0743","RHSA-2014:0744","RHSA-2014:0888","SUSE-SU-2015:0870-1","SUSE-SU-2015:0889-1","SUSE-SU-2015:1152-1","UBUNTU-CVE-2014-2894","USN-2182-1"],"status":"published","title":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before...","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00383,"percentile":0.32584,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2014-04-23T00:00:00Z","modified":"2026-10-23T15:47:33Z","fixes":[{"ecosystem":"Debian:12","package":"qemu","fixed_in":["2.0.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["2.0.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["2.0.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcacard","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-guest-agent","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-img","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm-common","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm-debuginfo","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcacard-devel","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcacard-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-guest-agent","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm-debuginfo","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcacard","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcacard-devel","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcacard-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-img","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm-common","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcacard","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-guest-agent","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-img","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-common","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-debuginfo","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcacard-devel","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcacard-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcacard","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-guest-agent","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-img","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm-common","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm-debuginfo","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcacard-devel","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcacard-tools","fixed_in":["10:1.5.3-60.el7_0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"qemu","fixed_in":["2.0.0~rc1+dfsg-0ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2+dfsg-6a+deb7u3"}]}],"versions":["1.1.2+dfsg-6a","1.1.2+dfsg-6a+deb7u1","1.1.2+dfsg-6a+deb7u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2+dfsg-6+deb7u3"}]}],"versions":["1.1.2+dfsg-6","1.1.2+dfsg-6+deb7u1","1.1.2+dfsg-6+deb7u2"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5-20140603.2.el6ev"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcacard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcacard-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcacard-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcacard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcacard-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcacard-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcacard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcacard-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcacard-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcacard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcacard-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcacard-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:1.5.3-60.el7_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"qemu-kvm-rhev-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"qemu-kvm-rhev-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"qemu-kvm-rhev-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.415.el6_5.10"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~rc1+dfsg-0ubuntu3.1"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~rc1+dfsg-0ubuntu3.1"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3"],"bundled":3}],"products":[{"vendor":"qemu","product":"qemu"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2014-0743.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02016.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0744.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02095.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2182-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02152.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/57945","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/04/18/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0704.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/04/15/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/66932","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/58191","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2894","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0674","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0704","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0743","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0744","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1087971","tags":["report"]},{"url":"https://github.com/advisories/GHSA-5v9x-x46w-vf3f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-2894","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1063182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1066334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1066342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1066361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1066382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1066384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1066401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1088986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1095812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1096821","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0674.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4148","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4151","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4535","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4535","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4536","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4536","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6399","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6399","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0145","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0146","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0148","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0150","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0182","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0182","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2894","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3461","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3461","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3461","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094820","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0704.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1100575","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0743.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0744.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0888.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150870-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/812836","tags":["report"]},{"url":"https://bugzilla.suse.com/812983","tags":["report"]},{"url":"https://bugzilla.suse.com/817593","tags":["report"]},{"url":"https://bugzilla.suse.com/821819","tags":["report"]},{"url":"https://bugzilla.suse.com/824340","tags":["report"]},{"url":"https://bugzilla.suse.com/829800","tags":["report"]},{"url":"https://bugzilla.suse.com/841080","tags":["report"]},{"url":"https://bugzilla.suse.com/842006","tags":["report"]},{"url":"https://bugzilla.suse.com/842088","tags":["report"]},{"url":"https://bugzilla.suse.com/858858","tags":["report"]},{"url":"https://bugzilla.suse.com/864391","tags":["report"]},{"url":"https://bugzilla.suse.com/864649","tags":["report"]},{"url":"https://bugzilla.suse.com/864650","tags":["report"]},{"url":"https://bugzilla.suse.com/864653","tags":["report"]},{"url":"https://bugzilla.suse.com/864655","tags":["report"]},{"url":"https://bugzilla.suse.com/864665","tags":["report"]},{"url":"https://bugzilla.suse.com/864671","tags":["report"]},{"url":"https://bugzilla.suse.com/864673","tags":["report"]},{"url":"https://bugzilla.suse.com/864678","tags":["report"]},{"url":"https://bugzilla.suse.com/864682","tags":["report"]},{"url":"https://bugzilla.suse.com/864769","tags":["report"]},{"url":"https://bugzilla.suse.com/864796","tags":["report"]},{"url":"https://bugzilla.suse.com/864801","tags":["report"]},{"url":"https://bugzilla.suse.com/864802","tags":["report"]},{"url":"https://bugzilla.suse.com/864804","tags":["report"]},{"url":"https://bugzilla.suse.com/864805","tags":["report"]},{"url":"https://bugzilla.suse.com/864811","tags":["report"]},{"url":"https://bugzilla.suse.com/864812","tags":["report"]},{"url":"https://bugzilla.suse.com/864814","tags":["report"]},{"url":"https://bugzilla.suse.com/870439","tags":["report"]},{"url":"https://bugzilla.suse.com/873235","tags":["report"]},{"url":"https://bugzilla.suse.com/874749","tags":["report"]},{"url":"https://bugzilla.suse.com/874788","tags":["report"]},{"url":"https://bugzilla.suse.com/876842","tags":["report"]},{"url":"https://bugzilla.suse.com/877642","tags":["report"]},{"url":"https://bugzilla.suse.com/877645","tags":["report"]},{"url":"https://bugzilla.suse.com/878541","tags":["report"]},{"url":"https://bugzilla.suse.com/886535","tags":["report"]},{"url":"https://bugzilla.suse.com/920571","tags":["report"]},{"url":"https://bugzilla.suse.com/924018","tags":["report"]},{"url":"https://bugzilla.suse.com/929339","tags":["report"]},{"url":"https://bugzilla.suse.com/932267","tags":["report"]},{"url":"https://bugzilla.suse.com/932770","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3456","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150889-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151152-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-2894","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2182-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-4544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0150","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-2894","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","status":"published","published":"2014-04-23T14:00:00Z","modified":"2024-08-06T10:28:46.186Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-2917","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","status":"published","published":"2014-04-23T14:00:00Z","modified":"2024-08-06T10:28:46Z","updated_at":"2026-11-03T01:57:12.660671Z"}],"ghsa":[{"id":"GHSA-5v9x-x46w-vf3f","title":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before...","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","status":"published","published":"2022-05-13T01:13:58Z","modified":"2023-02-10T05:06:40Z","updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2014-2894","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","status":"published","published":"2014-04-23T15:55:05.157Z","modified":"2026-06-17T00:07:19.57Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:54.082915Z"}],"osv":[{"id":"CVE-2014-2894","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","status":"published","published":"2014-04-23T15:55:05Z","modified":"2026-04-10T03:43:42.886395Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-2894","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","status":"published","published":"2014-04-23T15:55:05.157Z","modified":"2026-10-23T15:47:33.882900791Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"DSA-2932-1","title":"qemu - security update","status":"published","published":"2014-05-19T00:00:00Z","modified":"2026-03-09T01:20:14.619825Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-2933-1","title":"qemu-kvm - security update","status":"published","published":"2014-05-19T00:00:00Z","modified":"2026-03-09T01:17:57.738079Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"RHSA-2014:0674","title":"Red Hat Security Advisory: rhev-hypervisor6 3.4.0 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T08:52:55Z","modified":"2026-06-28T10:10:22Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:0704","title":"Red Hat Security Advisory: qemu-kvm security and bug fix update","status":"published","published":"2024-09-13T08:52:57Z","modified":"2026-06-26T12:21:46.594038628Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:0743","title":"Red Hat Security Advisory: qemu-kvm security and bug fix update","status":"published","published":"2024-09-13T08:53:23Z","modified":"2026-06-28T10:10:29Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:0744","title":"Red Hat Security Advisory: qemu-kvm-rhev security update","status":"published","published":"2024-09-13T08:53:34Z","modified":"2026-06-28T10:10:29Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:0888","title":"Red Hat Security Advisory: qemu-kvm-rhev security update","status":"published","published":"2024-09-13T08:53:42Z","modified":"2026-06-28T10:10:45Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0870-1","title":"Security update for kvm","description":"\nkvm has been updated to fix issues in the embedded qemu:\n\n    * \n\n      CVE-2014-0223: An integer overflow flaw was found in the QEMU block\n      driver for QCOW version 1 disk images. A user able to alter the QEMU\n      disk image files loaded by a guest could have used this flaw to\n      corrupt QEMU process memory on the host, which could potentially have\n      resulted in arbitrary code execution on the host with the privileges\n      of the QEMU process.\n\n    * \n\n      CVE-2014-3461: A user able to alter the savevm data (either on the\n      disk or over the wire during migration) could have used this flaw to\n      to corrupt QEMU process memory on the (destination) host, which could\n      have potentially resulted in arbitrary code execution on the host\n      with the privileges of the QEMU process.\n\n    * \n\n      CVE-2014-0222: An integer overflow flaw was found in the QEMU block\n      driver for QCOW version 1 disk images. A user able to alter the QEMU\n      disk image files loaded by a guest could have used this flaw to\n      corrupt QEMU process memory on the host, which could have potentially\n      resulted in arbitrary code execution on the host with the privileges\n      of the QEMU process.\n\nNon-security bugs fixed:\n\n    * Fix exceeding IRQ routes that could have caused freezes of guests.\n      (bnc#876842)\n    * Fix CPUID emulation bugs that may have broken Windows guests with\n      newer -cpu types (bnc#886535)\n\nSecurity Issues:\n\n    * CVE-2014-0222\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0222\u003e\n    * CVE-2014-0223\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0223\u003e\n    * CVE-2014-3461\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3461\u003e\n\n","status":"published","published":"2014-09-19T14:41:45Z","modified":"2026-02-04T02:40:36.136649Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0889-1","title":"Security update for kvm","description":"\nkvm has been updated to fix issues in the embedded qemu:\n\n    * \n\n      CVE-2014-0223: An integer overflow flaw was found in the QEMU block\n      driver for QCOW version 1 disk images. A user able to alter the QEMU\n      disk image files loaded by a guest could have used this flaw to\n      corrupt QEMU process memory on the host, which could potentially have\n      resulted in arbitrary code execution on the host with the privileges\n      of the QEMU process.\n\n    * \n\n      CVE-2014-3461: A user able to alter the savevm data (either on the\n      disk or over the wire during migration) could have used this flaw to\n      to corrupt QEMU process memory on the (destination) host, which could\n      have potentially resulted in arbitrary code execution on the host\n      with the privileges of the QEMU process.\n\n    * \n\n      CVE-2014-0222: An integer overflow flaw was found in the QEMU block\n      driver for QCOW version 1 disk images. A user able to alter the QEMU\n      disk image files loaded by a guest could have used this flaw to\n      corrupt QEMU process memory on the host, which could have potentially\n      resulted in arbitrary code execution on the host with the privileges\n      of the QEMU process.\n\nNon-security bugs fixed:\n\n    * Fix exceeding IRQ routes that could have caused freezes of guests.\n      (bnc#876842)\n    * Fix CPUID emulation bugs that may have broken Windows guests with\n      newer -cpu types (bnc#886535)\n\nSecurity Issues:\n\n    * CVE-2014-0222\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0222\u003e\n    * CVE-2014-0223\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0223\u003e\n    * CVE-2014-3461\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3461\u003e\n\n","status":"published","published":"2014-09-19T14:41:45Z","modified":"2026-02-04T02:14:59.402186Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1152-1","title":"Security update for kvm","description":"\nkvm has been updated to fix issues in the embedded qemu:\n\n    * \n\n      CVE-2014-0223: An integer overflow flaw was found in the QEMU block\n      driver for QCOW version 1 disk images. A user able to alter the QEMU\n      disk image files loaded by a guest could have used this flaw to\n      corrupt QEMU process memory on the host, which could potentially have\n      resulted in arbitrary code execution on the host with the privileges\n      of the QEMU process.\n\n    * \n\n      CVE-2014-3461: A user able to alter the savevm data (either on the\n      disk or over the wire during migration) could have used this flaw to\n      to corrupt QEMU process memory on the (destination) host, which could\n      have potentially resulted in arbitrary code execution on the host\n      with the privileges of the QEMU process.\n\n    * \n\n      CVE-2014-0222: An integer overflow flaw was found in the QEMU block\n      driver for QCOW version 1 disk images. A user able to alter the QEMU\n      disk image files loaded by a guest could have used this flaw to\n      corrupt QEMU process memory on the host, which could have potentially\n      resulted in arbitrary code execution on the host with the privileges\n      of the QEMU process.\n\nNon-security bugs fixed:\n\n    * Fix exceeding IRQ routes that could have caused freezes of guests.\n      (bnc#876842)\n    * Fix CPUID emulation bugs that may have broken Windows guests with\n      newer -cpu types (bnc#886535)\n\nSecurity Issues:\n\n    * CVE-2014-0222\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0222\u003e\n    * CVE-2014-0223\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0223\u003e\n    * CVE-2014-3461\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3461\u003e\n\n","status":"published","published":"2014-09-19T14:41:45Z","modified":"2026-02-04T03:41:35.653354Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-2894","description":"Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.","status":"published","published":"2014-04-23T00:00:00Z","modified":"2026-02-04T04:22:35.963676Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2182-1","title":"qemu, qemu-kvm vulnerabilities","description":"Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3\ndevices. A local guest could possibly use this issue to cause a denial of\nservice, or possibly execute arbitrary code on the host. This issue only\napplied to Ubuntu 13.10 and Ubuntu 14.04 LTS. (CVE-2013-4544)\n\nMichael S. Tsirkin discovered that QEMU incorrectly handled virtio-net\nMAC addresses. A local guest could possibly use this issue to cause a\ndenial of service, or possibly execute arbitrary code on the host.\n(CVE-2014-0150)\n\nBenoît Canet discovered that QEMU incorrectly handled SMART self-tests. A\nlocal guest could possibly use this issue to cause a denial of service, or\npossibly execute arbitrary code on the host. (CVE-2014-2894)\n","status":"published","published":"2014-04-28T12:51:10Z","modified":"2026-02-10T04:40:48Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}