Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2014-11-04T21:00:00

Updated: 2017-11-03T18:57:01

Reserved: 2013-12-03T00:00:00


Link: CVE-2014-0223

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2014-11-04T21:55:25.237

Modified: 2023-02-13T00:37:31.263


Link: CVE-2014-0223

JSON object: View

cve-icon Redhat Information

No data.

CWE