Skip to content
OpenAdvisories
Unscored RHSA-2014:0420 8 CVEs

Red Hat Security Advisory: qemu-kvm security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client qemu-guest-agent 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::client qemu-img 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::client qemu-kvm 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::client qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::client qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-guest-agent 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-img 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-kvm 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::server qemu-guest-agent 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::server qemu-img 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::server qemu-kvm 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::server qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::server qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-guest-agent 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-img 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-kvm 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.8
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.8

Vulnerabilities 8

  • Unscored —
    CVE-2014-0142

    QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zer…

    qemu Debian
  • Unscored —
    CVE-2014-0143

    Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of …

    qemu Debian
  • Unscored —
    CVE-2014-0144

    QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential …

    qemu Debian
  • Unscored —
    CVE-2014-0145

    Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (cr…

    qemu Debian
  • Unscored —
    CVE-2014-0146

    The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a …

    qemu Debian
  • Unscored —
    CVE-2014-0147

    Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are v…

    qemu Virtualization Debian
  • Unscored —
    CVE-2014-0148

    Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when ca…

    qemu Virtualization Debian
  • Unscored —
    CVE-2014-0150

    Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local gues…

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078232
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078846
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078848
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1079140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1079240
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0420.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0142
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0142
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0142
  • report
    https://access.redhat.com/security/cve/CVE-2014-0143
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0143
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0143
  • report
    https://access.redhat.com/security/cve/CVE-2014-0144
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0144
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0144
  • report
    https://access.redhat.com/security/cve/CVE-2014-0145
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0145
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0145
  • report
    https://access.redhat.com/security/cve/CVE-2014-0146
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0146
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0146
  • report
    https://access.redhat.com/security/cve/CVE-2014-0147
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0147
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0147
  • report
    https://access.redhat.com/security/cve/CVE-2014-0148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0148
  • report
    https://access.redhat.com/security/cve/CVE-2014-0150
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0150
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0150