CVE-2014-3672

2016-05-2500:00:00

ubuntu.com

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

26.7%

JSON

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest
OS users to cause a denial of service (host disk consumption) by writing to
stdout or stderr.

Notes

Author	Note
mdeslaur	as of 2017-08-01, no equivalent fix in qemu tree. Unlikely to be fixed in qemu. As such, marking as ignored in qemu. the libvirt fix changes behaviour, we are not going to backport the new log location to trusty.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.6.1-0ubuntu0.12.04.11UNKNOWN
ubuntu14.04noarchxen< 4.4.2-0ubuntu0.14.04.6UNKNOWN