Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade libcacard-develUpgrade qemu-imgUpgrade libcacardUpgrade qemu-kvmUpgrade qemu-guest-agent | Dec 1, 2016 | Nov 4, 2014 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Nov 4, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2014 |
| Oracle_linux | — | Upgrade libcacardUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-imgUpgrade libcacard-develUpgrade qemu-kvm-common | Oct 16, 2024 | Nov 4, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 12, 2014 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-langUpgrade xen-libs-32bitUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade xen-toolsUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade xenUpgrade qemu-audio-alsaUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade xen-kmp-paeUpgrade qemu-hw-usb-redirectUpgrade qemu-ppcUpgrade xen-kmp-traceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-armUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade xen-develUpgrade qemu-chardev-spiceUpgrade qemu-audio-paUpgrade qemu-sgabiosUpgrade xen-doc-pdfUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpuUpgrade kvmUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-guest-agentUpgrade xen-libsUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu | Dec 18, 2015 | Oct 8, 2014 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-arm | Nov 8, 2024 | Nov 4, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub