RHSA-2014:0927Medium

Red Hat Security Advisory: qemu-kvm security and bug fix update

Published
July 23, 2014
Last Modified
June 27, 2026

🔗 CVE IDs covered (15)

📋 Description

CVE-2013-4148 — qemu: virtio-net: buffer overflow on invalid state load CVE-2013-4149 — qemu: virtio-net: out-of-bounds buffer write on load CVE-2013-4150 — qemu: virtio-net: out-of-bounds buffer write on invalid state load CVE-2013-4151 — qemu: virtio: out-of-bounds buffer write on invalid state load CVE-2013-4527 — qemu: hpet: buffer overrun on invalid state load CVE-2013-4529 — qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load CVE-2013-4535 — qemu: virtio: insufficient validation of num_sg when mapping CVE-2013-4536 — qemu: virtio: insufficient validation of num_sg when mapping CVE-2013-4541 — qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load CVE-2013-4542 — qemu: virtio-scsi: buffer overrun on invalid state load CVE-2013-6399 — qemu: virtio: buffer overrun on incoming migration CVE-2014-0182 — qemu: virtio: out-of-bounds buffer write on state load with invalid config_len CVE-2014-0222 — Qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0223 — Qemu: qcow1: validate image size to avoid out-of-bounds memory access CVE-2014-3461 — Qemu: usb: fix up post load checks

🔗 References (21)