CVE-2014-9718
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2014-9718
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
QEMU 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
QEMU（又名Quick Emulator）是法国程序员法布里斯-贝拉（Fabrice Bellard）所研发的一套模拟处理器软件。该软件具有速度快、跨平台等特点。 QEMU 1.0版本至2.1.3版本的IDE函数中的BMDMA或AHCI HBA接口存在安全漏洞，该漏洞源于函数的返回值使用多义解释。虚拟机操作系统端攻击者可借助畸形的PRDT数据利用该漏洞造成主机操作系统拒绝服务（内存消耗或无限循环，和系统崩溃）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2014-9718
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-9718
请登录查看更多情报信息。
Same Patch Batch · n/a · 2015-04-21 · 64 CVEs total
| CVE-2015-3363 | Drupal Contact Form Fields模块跨站请求伪造漏洞 | |
| CVE-2014-5370 | New Atlanta BlueDragon 目录遍历漏洞 | |
| CVE-2015-2041 | Linux kernel 代码注入漏洞 | |
| CVE-2015-1701 | Microsoft Windows Win32k 特权提升漏洞 | |
| CVE-2015-2825 | WordPress Simple Ads Manager 任意文件上传漏洞 | |
| CVE-2015-3368 | Drupal Classified Ads模块跨站脚本漏洞 | |
| CVE-2015-3367 | Drupal Patterns模块跨站请求伪造漏洞 | |
| CVE-2015-3366 | Drupal Alfresco模块跨站请求伪造漏洞 | |
| CVE-2015-3365 | Drupal nodeauthor模块跨站脚本漏洞 | |
| CVE-2015-3364 | Drupal Content Analysis模块跨站脚本漏洞 | |
| CVE-2015-3369 | Drupal Taxonews模块跨站脚本漏洞 | |
| CVE-2015-3362 | Drupal Video模块跨站脚本漏洞 | |
| CVE-2015-3361 | Drupal Linkit模块跨站脚本漏洞 | |
| CVE-2015-3360 | Drupal Term Merge模块跨站脚本漏洞 | |
| CVE-2015-3359 | Drupal Room Reservations模块跨站脚本漏洞 | |
| CVE-2015-3358 | Drupal Tadaa!模块开放重定向漏洞 | |
| CVE-2015-3357 | Drupal Wishlist模块跨站脚本漏洞 | |
| CVE-2015-3356 | Drupal Tadaa!模块跨站请求伪造漏洞 | |
| CVE-2015-3355 | Drupal Batch Jobs模块跨站请求伪造漏洞 | |
| CVE-2015-3354 | Drupal Wishlist模块跨站请求伪造漏洞 |
Showing top 20 of 64 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-9718
No comments yet