CVE-2014-5388
Fixed in a distro release EPSS <1%
Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.
Products: qemu, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 2.1+dfsg-5 |
| Debian 13 | qemu | 2.1+dfsg-5 |
| Debian 14 | qemu | 2.1+dfsg-5 |
| SUSE Linux Enterprise Server 12-LTSS | qemu | 2.0.2-48.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | qemu | 2.0.2-48.22.1 |
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.7 |