CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
42.0%
Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3
devices. A local guest could possibly use this issue to cause a denial of
service, or possibly execute arbitrary code on the host. This issue only
applied to Ubuntu 13.10 and Ubuntu 14.04 LTS. (CVE-2013-4544)
Michael S. Tsirkin discovered that QEMU incorrectly handled virtio-net
MAC addresses. A local guest could possibly use this issue to cause a
denial of service, or possibly execute arbitrary code on the host.
(CVE-2014-0150)
Benoรฎt Canet discovered that QEMU incorrectly handled SMART self-tests. A
local guest could possibly use this issue to cause a denial of service, or
possibly execute arbitrary code on the host. (CVE-2014-2894)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 14.04 | noarch | qemu-system | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-guest-agent | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-kvm | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-system-arm | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-system-common | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-system-mips | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-system-misc | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-system-ppc | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | qemu-system-sparc | <ย 2.0.0~rc1+dfsg-0ubuntu3.1 | UNKNOWN |