PT-2014-6445 · Qemu+3 · Qemu+3

CVE-2014-5388

·

Publicado

2014-08-26

·

Atualizado

2023-02-13

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue is related to an off-by-one error in the pci read function within the ACPI PCI hotplug interface. This error can be triggered by a crafted PCI device, leading to memory corruption. As a result, local guest users may be able to obtain sensitive information and potentially have other unspecified impacts.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2014-2465
CVE-2014-5388
SUSE-SU-2016:2781-1
SUSE-SU-2016_2781-1
USN-2409-1

Produtos afetados

Alt Linux
Qemu
Suse
Ubuntu