Vulnerability Details : CVE-2014-3471
Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio block devices.
Vulnerability category: Memory CorruptionDenial of service
Products affected by CVE-2014-3471
- cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
- cpe:2.3:a:qemu:qemu:2.1.2:r1:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-3471
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-3471
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST | |
5.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2014-3471
-
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-3471
-
http://www.securityfocus.com/bid/68145
QEMU CVE-2014-3471 Denial of Service VulnerabilityThird Party Advisory;VDB Entry
-
https://lists.gnu.org/archive/html/qemu-devel/2014-06/msg05283.html
[Qemu-devel] [PATCH v2 3/3] hw/pcie: better hotplug/hotunplug supportPatch;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2014/06/23/4
oss-security - CVE-2014-3471 Qemu: hw: pci: use after free triggered via guestMailing List;Patch;Third Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=1112271
1112271 – (CVE-2014-3471) CVE-2014-3471 Qemu: hw: pci: use after free triggered via guestIssue Tracking;Patch;Third Party Advisory
-
http://security.gentoo.org/glsa/glsa-201412-01.xml
QEMU: Multiple Vulnerabilities (GLSA 201412-01) — Gentoo securityThird Party Advisory
Jump to