CVE-2014-7840 Memory corruption in n/a
Remote attackers can execute arbitrary code on QEMU hosts by sending crafted migration data, affecting virtualization infrastructure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-7840?
CVE-2014-7840 is a high-severity memory corruption vulnerability in Qemu Qemu, published on 12 Dec 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.
Weakness: CWE-20
Which versions are affected by CVE-2014-7840?
It affects 7 products.
Products include Qemu Qemu, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Eus, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Workstation and 1 more.
How do I fix CVE-2014-7840?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2014-7840 being exploited?
There is no known exploitation of CVE-2014-7840 in the wild and no public exploit code.
Other vulnerabilities in Qemu Qemu
Sources
Also known as DEBIAN-CVE-2014-7840, GHSA-m2wj-gq82-h93m, UBUNTU-CVE-2014-7840.