Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2014-3640: QEMU Local Denial of Service via UDP Packet
CVE-2014-3640 · published 12 years ago
Summary
A local user can crash QEMU by sending a specific UDP packet. This can happen if an attacker has access to the same computer as QEMU. To fix this, update to QEMU version 2.1.2 or later.
What to do
- Update debian qemu to version 2.1+dfsg-5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | qemu |
< 2.1+dfsg-5 Fix: upgrade to 2.1+dfsg-5
|
| Debian:12 | debian | qemu |
< 2.1+dfsg-5 Fix: upgrade to 2.1+dfsg-5
|
| Debian:13 | debian | qemu |
< 2.1+dfsg-5 Fix: upgrade to 2.1+dfsg-5
|
| Debian:14 | debian | qemu |
< 2.1+dfsg-5 Fix: upgrade to 2.1+dfsg-5
|
| – | debian | debian_linux |
7.0 cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* |
| – | qemu | qemu |
2.0.0 2.0.2 2.1.0 2.1.1 cpe:2.3:a:qemu:qemu:2.0.0:-:*:*:*:*:*:* |
| – | redhat | enterprise_linux_desktop |
7.0 cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_hpc_node |
7.0 cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_server |
7.0 cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_workstation |
7.0 cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* |
| – | canonical | ubuntu_linux |
10.04 12.04 14.04 14.10 cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:* |
Original advisory text
The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and...
The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.
References
- https://security-tracker.debian.org/tracker/CVE-2014-3640 Vendor Advisory
- http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg03543.html Patch Vendor Advisory
- http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04598.html Patch Vendor Advisory
- http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04707.html Patch Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0349.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0624.html Third Party Advisory
- http://www.debian.org/security/2014/dsa-3044
- http://www.debian.org/security/2014/dsa-3045 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2409-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1144818 Issue Tracking
Severity
2.1
Low
Type
CWE-476NULL Pointer Dereference
Timeline
Published7 Nov 2014
Updated4 Nov 2026
First seen18 Aug 2026
Track software like this
Free during beta