CVE-2014-0144
qemu: QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potentia...
CVE-2014-0144 is fixed in qemu on 1 platform, first by DEBIAN-CVE-2014-0144, released September 29, 2022. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.6
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0101
63rd percentile
QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host with the privileges of the QEMU process.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| qemu · Debian 12.15 (bookworm) | 2.0.0+dfsg-1 | DEBIAN-CVE-2014-0144 | Sep 29, 2022 |
| qemu · Debian 13.5 (trixie) | 2.0.0+dfsg-1 | DEBIAN-CVE-2014-0144 | Sep 29, 2022 |
| qemu · Debian 14 | 2.0.0+dfsg-1 | DEBIAN-CVE-2014-0144 | Sep 29, 2022 |