CVE-2014-3689

The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
qemuqemu
𝑥
≤ 2.1.3
debiandebian_linux
7.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bullseye
1:5.2+dfsg-11+deb11u3
fixed
bullseye (security)
1:5.2+dfsg-11+deb11u2
fixed
bookworm
1:7.2+dfsg-7+deb12u7
fixed
sid
1:9.1.1+ds-2
fixed
trixie
1:9.1.1+ds-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
utopic
Fixed 2.1+dfsg-4ubuntu6.1
released
trusty
Fixed 2.0.0+dfsg-2ubuntu1.7
released
precise
dne
lucid
dne
qemu-kvm
utopic
dne
trusty
dne
precise
Fixed 1.0+noroms-0ubuntu14.19
released
lucid
Fixed 0.12.3+noroms-0ubuntu9.25
released
Common Weakness Enumeration
References
http://secunia.com/advisories/60923
http://secunia.com/advisories/62143
http://secunia.com/advisories/62144
http://www.debian.org/security/2014/dsa-3066
http://www.debian.org/security/2014/dsa-3067
http://www.osvdb.org/114397
http://www.ubuntu.com/usn/USN-2409-1
https://www.mail-archive.com/qemu-devel%40nongnu.org/msg261580.html
http://secunia.com/advisories/60923
http://secunia.com/advisories/62143
http://secunia.com/advisories/62144
http://www.debian.org/security/2014/dsa-3066
http://www.debian.org/security/2014/dsa-3067
http://www.osvdb.org/114397
http://www.ubuntu.com/usn/USN-2409-1
https://www.mail-archive.com/qemu-devel%40nongnu.org/msg261580.html