CVE-2014-8106

Published: Dec 8, 2014Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.

Affected (8)

Products: Qemu: Qemu

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Qemu Qemu	Up to 2.1.2
Qemu Qemu	Version 2.1.0
Qemu Qemu	Version 2.1.0 rc0
Qemu Qemu	Version 2.1.0 rc1
Qemu Qemu	Version 2.1.0 rc2
Qemu Qemu	Version 2.1.0 rc3
Qemu Qemu	Version 2.1.0 rc5
Qemu Qemu	Version 2.1.1

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (36)

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a

Source: secalert@redhat.com

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d3532a0db02296e687711b8cdc7791924efccea0

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html

Source: secalert@redhat.com

http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0349.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0624.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0643.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0795.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0867.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0868.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0891.html

Source: secalert@redhat.com

http://secunia.com/advisories/60364

Source: secalert@redhat.com

http://support.citrix.com/article/CTX200892

Source: secalert@redhat.com

http://www.debian.org/security/2014/dsa-3087

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2014/dsa-3088

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2014/12/04/8

Source: secalert@redhat.com

http://www.securityfocus.com/bid/71477

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/99126

Source: secalert@redhat.com

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d3532a0db02296e687711b8cdc7791924efccea0

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0349.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0624.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0643.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0795.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0867.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0868.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0891.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/60364

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.citrix.com/article/CTX200892

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-3087

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2014/dsa-3088

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2014/12/04/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/71477

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/99126

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.