QEMU - Buffer Overflow and Off-by-One Error Vulnerabilities
Summary
DSA-2932-1: qemu - security update. Affects qemu versions < 1.1.2+dfsg-6a+deb7u3. Fixed in 1.1.2+dfsg-6a+deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
QEMU is a fast processor emulator that allows users to run virtual machines on various host platforms. It provides hardware virtualization for a wide range of devices, including SCSI controllers and IDE drives. QEMU is widely used in virtualization environments to emulate different architectures and run guest operating systems. However, several vulnerabilities have been discovered in QEMU that could potentially be exploited by local users to gain privileges or cause memory corruption.
Vulnerability Detail
The first vulnerability, identified as CVE-2013-4344, involves a buffer overflow in the SCSI implementation of QEMU. When a SCSI controller has more than 256 attached devices, a local user can exploit this vulnerability by sending a small transfer buffer in a REPORT LUNS command, potentially gaining elevated privileges. The second vulnerability, known as CVE-2014-2894, is an off-by-one error in the cmd_smart function of the smart self-test in QEMU's IDE core. This vulnerability allows local users to trigger a buffer underflow and memory corruption by executing a SMART EXECUTE OFFLINE command, leading to unspecified impacts.
How To Fix
Minimum fixed version
1.1.2+dfsg-6a+deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade qemuTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
QEMU is susceptible to buffer overflow and off-by-one error vulnerabilities, which can be exploited by local users to gain privileges or cause memory corruption. It is crucial to upgrade to the recommended versions of QEMU to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for qemu →
FAQ
QEMU is a fast processor emulator that allows users to run virtual machines on various host platforms. It provides hardware virtualization for a wide range of devices.
The impact of CVE-2013-4344 is that local users can gain privileges by exploiting a buffer overflow in the SCSI implementation of QEMU when a SCSI controller has more than 256 attached devices.
The impact of CVE-2014-2894 is that local users can trigger a buffer underflow and memory corruption in QEMU's IDE core by executing a SMART EXECUTE OFFLINE command.
To fix these vulnerabilities, you should upgrade your QEMU packages to the recommended versions mentioned in the 'how_to_fix' section.
The necessary updates can be obtained from the official Debian repositories.
Related vulnerabilities
Recent vulnerabilities recorded for qemu.
