CVE-2014-0150: Buffer Overflow
A buffer overflow flaw was found in the way qemu processed MAC addresses table update requests from the guest.
A privileged guest user could use this flaw to corrupt qemu process memory on the host, which could potentially result in arbitrary code execution on the host with the privileges of the qemu process.
Acknowledgements:
This issue was discovered by Michael S. Tsirkin of Red Hat.
Other sources
Integer overflow in the virtionethandlemac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0150?
CVE-2014-0150 has a medium severity rating due to the potential for arbitrary code execution on the host.
How do I fix CVE-2014-0150?
To fix CVE-2014-0150, upgrade QEMU to version 2.0.1 or later.
Who is affected by CVE-2014-0150?
Privileged users of QEMU versions up to 2.0, including various early versions from 0.1.0 to 2.0.0, are affected by CVE-2014-0150.
What type of vulnerability is CVE-2014-0150?
CVE-2014-0150 is classified as a buffer overflow vulnerability.
What could an attacker achieve using CVE-2014-0150?
An attacker exploiting CVE-2014-0150 could potentially execute arbitrary code on the host system with the privileges of the QEMU process.