PT-2014-3502

CVE-2014-0147

·

Published

2013-11-29

·

Updated

2024-06-15

Description by

CVSS 3.1
6.2
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Qemu versions prior to 1.6.2
Description The issue is related to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots. This leads to incorrectly calling the update refcount() routine, potentially causing the program to crash.
Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue. As a temporary workaround, consider avoiding the creation of QCOW2 snapshots until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2013-1219
CESA-2014_0420
DSA-3044-1
DSA-3045-1
MGASA-2014-0426
OPENSUSE-SU-2024:10233-1
RHSA-2014:0420
RHSA-2014_0420
RHSA-2014:0421
RHSA-2014:0434
RHSA-2014:0435
RHSA-2014:0674
SUSE-SU-2015:0870-1
SUSE-SU-2015:0889-1
SUSE-SU-2015:1152-1
USN-2342-1
Found an issue in the description? Have something to add? Feel free to write us 👾