7.2

CVE-2014-2894

Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.

Data is provided by the National Vulnerability Database (NVD)
QemuQemu Version <= 1.7.1
QemuQemu Version0.1.0
QemuQemu Version0.1.1
QemuQemu Version0.1.2
QemuQemu Version0.1.3
QemuQemu Version0.1.4
QemuQemu Version0.1.5
QemuQemu Version0.1.6
QemuQemu Version0.2.0
QemuQemu Version0.3.0
QemuQemu Version0.4.0
QemuQemu Version0.4.1
QemuQemu Version0.4.2
QemuQemu Version0.4.3
QemuQemu Version0.5.0
QemuQemu Version0.5.1
QemuQemu Version0.5.2
QemuQemu Version0.5.3
QemuQemu Version0.5.4
QemuQemu Version0.5.5
QemuQemu Version0.6.0
QemuQemu Version0.6.1
QemuQemu Version0.7.0
QemuQemu Version0.7.1
QemuQemu Version0.7.2
QemuQemu Version0.8.0
QemuQemu Version0.8.1
QemuQemu Version0.8.2
QemuQemu Version0.9.0
QemuQemu Version0.9.1
QemuQemu Version0.9.1-5
QemuQemu Version0.10.0
QemuQemu Version0.10.1
QemuQemu Version0.10.2
QemuQemu Version0.10.3
QemuQemu Version0.10.4
QemuQemu Version0.10.5
QemuQemu Version0.10.6
QemuQemu Version0.11.0
QemuQemu Version0.11.0 Updaterc0
QemuQemu Version0.11.0 Updaterc1
QemuQemu Version0.11.0 Updaterc2
QemuQemu Version0.11.0-rc0
QemuQemu Version0.11.0-rc1
QemuQemu Version0.11.0-rc2
QemuQemu Version0.11.1
QemuQemu Version0.12.0
QemuQemu Version0.12.0 Updaterc1
QemuQemu Version0.12.0 Updaterc2
QemuQemu Version0.12.1
QemuQemu Version0.12.2
QemuQemu Version0.12.3
QemuQemu Version0.12.4
QemuQemu Version0.12.5
QemuQemu Version0.13.0
QemuQemu Version0.13.0 Updaterc0
QemuQemu Version0.13.0 Updaterc1
QemuQemu Version0.14.0
QemuQemu Version0.14.0 Updaterc0
QemuQemu Version0.14.0 Updaterc1
QemuQemu Version0.14.0 Updaterc2
QemuQemu Version0.14.1
QemuQemu Version0.15.0 Updaterc1
QemuQemu Version0.15.0 Updaterc2
QemuQemu Version0.15.1
QemuQemu Version0.15.2
QemuQemu Version1.0
QemuQemu Version1.0 Updaterc1
QemuQemu Version1.0 Updaterc2
QemuQemu Version1.0 Updaterc3
QemuQemu Version1.0 Updaterc4
QemuQemu Version1.0.1
QemuQemu Version1.1
QemuQemu Version1.1 Updaterc1
QemuQemu Version1.1 Updaterc2
QemuQemu Version1.1 Updaterc3
QemuQemu Version1.1 Updaterc4
QemuQemu Version1.1.1
QemuQemu Version1.1.2
QemuQemu Version1.2.0
QemuQemu Version1.2.0 Updaterc0
QemuQemu Version1.2.0 Updaterc1
QemuQemu Version1.2.0 Updaterc2
QemuQemu Version1.2.0 Updaterc3
QemuQemu Version1.2.1
QemuQemu Version1.2.2
QemuQemu Version1.3.0
QemuQemu Version1.3.0 Updaterc0
QemuQemu Version1.3.0 Updaterc1
QemuQemu Version1.3.0 Updaterc2
QemuQemu Version1.3.1
QemuQemu Version1.4.0 Updaterc0
QemuQemu Version1.4.0 Updaterc1
QemuQemu Version1.4.1
QemuQemu Version1.4.2
QemuQemu Version1.5.0
QemuQemu Version1.5.0 Updaterc1
QemuQemu Version1.5.0 Updaterc2
QemuQemu Version1.5.0 Updaterc3
QemuQemu Version1.5.1
QemuQemu Version1.5.2
QemuQemu Version1.5.3
QemuQemu Version1.6.0
QemuQemu Version1.6.0 Updaterc1
QemuQemu Version1.6.0 Updaterc2
QemuQemu Version1.6.0 Updaterc3
QemuQemu Version1.6.1
QemuQemu Version1.6.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.153
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C