CVE-2014-2894

Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
VendorProductVersion
qemuqemu
𝑥
≤ 1.7.1
qemuqemu
0.1.0
qemuqemu
0.1.1
qemuqemu
0.1.2
qemuqemu
0.1.3
qemuqemu
0.1.4
qemuqemu
0.1.5
qemuqemu
0.1.6
qemuqemu
0.2.0
qemuqemu
0.3.0
qemuqemu
0.4.0
qemuqemu
0.4.1
qemuqemu
0.4.2
qemuqemu
0.4.3
qemuqemu
0.5.0
qemuqemu
0.5.1
qemuqemu
0.5.2
qemuqemu
0.5.3
qemuqemu
0.5.4
qemuqemu
0.5.5
qemuqemu
0.6.0
qemuqemu
0.6.1
qemuqemu
0.7.0
qemuqemu
0.7.1
qemuqemu
0.7.2
qemuqemu
0.8.0
qemuqemu
0.8.1
qemuqemu
0.8.2
qemuqemu
0.9.0
qemuqemu
0.9.1
qemuqemu
0.9.1-5
qemuqemu
0.10.0
qemuqemu
0.10.1
qemuqemu
0.10.2
qemuqemu
0.10.3
qemuqemu
0.10.4
qemuqemu
0.10.5
qemuqemu
0.10.6
qemuqemu
0.11.0
qemuqemu
0.11.0:rc0
qemuqemu
0.11.0:rc1
qemuqemu
0.11.0:rc2
qemuqemu
0.11.0-rc0
qemuqemu
0.11.0-rc1
qemuqemu
0.11.0-rc2
qemuqemu
0.11.1
qemuqemu
0.12.0
qemuqemu
0.12.0:rc1
qemuqemu
0.12.0:rc2
qemuqemu
0.12.1
qemuqemu
0.12.2
qemuqemu
0.12.3
qemuqemu
0.12.4
qemuqemu
0.12.5
qemuqemu
0.13.0
qemuqemu
0.13.0:rc0
qemuqemu
0.13.0:rc1
qemuqemu
0.14.0
qemuqemu
0.14.0:rc0
qemuqemu
0.14.0:rc1
qemuqemu
0.14.0:rc2
qemuqemu
0.14.1
qemuqemu
0.15.0:rc1
qemuqemu
0.15.0:rc2
qemuqemu
0.15.1
qemuqemu
0.15.2
qemuqemu
1.0
qemuqemu
1.0:rc1
qemuqemu
1.0:rc2
qemuqemu
1.0:rc3
qemuqemu
1.0:rc4
qemuqemu
1.0.1
qemuqemu
1.1
qemuqemu
1.1:rc1
qemuqemu
1.1:rc2
qemuqemu
1.1:rc3
qemuqemu
1.1:rc4
qemuqemu
1.1.1
qemuqemu
1.1.2
qemuqemu
1.2.0
qemuqemu
1.2.0:rc0
qemuqemu
1.2.0:rc1
qemuqemu
1.2.0:rc2
qemuqemu
1.2.0:rc3
qemuqemu
1.2.1
qemuqemu
1.2.2
qemuqemu
1.3.0
qemuqemu
1.3.0:rc0
qemuqemu
1.3.0:rc1
qemuqemu
1.3.0:rc2
qemuqemu
1.3.1
qemuqemu
1.4.0:rc0
qemuqemu
1.4.0:rc1
qemuqemu
1.4.1
qemuqemu
1.4.2
qemuqemu
1.5.0
qemuqemu
1.5.0:rc1
qemuqemu
1.5.0:rc2
qemuqemu
1.5.0:rc3
qemuqemu
1.5.1
qemuqemu
1.5.2
qemuqemu
1.5.3
qemuqemu
1.6.0
qemuqemu
1.6.0:rc1
qemuqemu
1.6.0:rc2
qemuqemu
1.6.0:rc3
qemuqemu
1.6.1
qemuqemu
1.6.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bullseye
1:5.2+dfsg-11+deb11u3
fixed
squeeze
not-affected
bullseye (security)
1:5.2+dfsg-11+deb11u2
fixed
bookworm
1:7.2+dfsg-7+deb12u7
fixed
sid
1:9.1.1+ds-2
fixed
trixie
1:9.1.1+ds-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
trusty
Fixed 2.0.0~rc1+dfsg-0ubuntu3.1
released
saucy
Fixed 1.5.0+dfsg-3ubuntu5.4
released
quantal
dne
precise
dne
lucid
dne
qemu-kvm
trusty
dne
saucy
dne
quantal
Fixed 1.2.0+noroms-0ubuntu2.12.10.7
released
precise
Fixed 1.0+noroms-0ubuntu14.14
released
lucid
Fixed 0.12.3+noroms-0ubuntu9.22
released
Common Weakness Enumeration