CVEvulnerability
CVE-2014-5388
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-193
Description
Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.
Affected configurations
• qemu qemu (<= 2.1.3)
• canonical ubuntu linux 10.04
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 14.10
Related
Weakness · CWE (1)
- CWE-193 Off-by-one Error weakness
References
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa365d7cd11185237471823a5a33d36765454e16 git.qemu.org
- http://seclists.org/oss-sec/2014/q3/438 Mailing List, Patch, Third Party Advisory
- http://seclists.org/oss-sec/2014/q3/440 Mailing List, Third Party Advisory
- http://www.ubuntu.com/usn/USN-2409-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1132956 Issue Tracking, Third Party Advisory
- https://lists.gnu.org/archive/html/qemu-devel/2014-08/msg03338.html Patch, Third Party Advisory
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa365d7cd11185237471823a5a33d36765454e16 git.qemu.org
- http://seclists.org/oss-sec/2014/q3/438 Mailing List, Patch, Third Party Advisory
- http://seclists.org/oss-sec/2014/q3/440 Mailing List, Third Party Advisory
- http://www.ubuntu.com/usn/USN-2409-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1132956 Issue Tracking, Third Party Advisory
- https://lists.gnu.org/archive/html/qemu-devel/2014-08/msg03338.html Patch, Third Party Advisory