CVE-2014-3471

State: Published
Severity: Not scored
Published: Jan 12, 2018
Updated: Aug 6, 2024
Reserved: May 14, 2014

Description

Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio block devices.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20140623 CVE-2014-3471 Qemu: hw: pci: use after free triggered via guestmailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=1112271
GLSA-201412-01vendor-advisory
68145vdb-entry
[qemu-devel] 20140623 PATCH v2 3/3] hw/pcie: better hotplug/hotunplug supportmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.