CVE-2014-5388

Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.
Configurations

Configuration 1 (hide)

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-11-15 21:59

Updated : 2024-02-28 12:20


NVD link : CVE-2014-5388

Mitre link : CVE-2014-5388

CVE.ORG link : CVE-2014-5388


JSON object : View

Products Affected

canonical

  • ubuntu_linux

qemu

  • qemu
CWE
CWE-193

Off-by-one Error