CVE-2014-3640

LowCVSS 2.1/10Last modified Jun 17, 2026

Description

The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg03543.htmlPatch, Vendor Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04598.htmlPatch, Vendor Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04707.htmlPatch, Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-0349.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0624.htmlThird Party Advisory
http://www.debian.org/security/2014/dsa-3044
http://www.debian.org/security/2014/dsa-3045Third Party Advisory
http://www.ubuntu.com/usn/USN-2409-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1144818Issue Tracking
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg03543.htmlPatch, Vendor Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04598.htmlPatch, Vendor Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04707.htmlPatch, Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-0349.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0624.htmlThird Party Advisory
http://www.debian.org/security/2014/dsa-3044
http://www.debian.org/security/2014/dsa-3045Third Party Advisory
http://www.ubuntu.com/usn/USN-2409-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1144818Issue Tracking

Timeline

Published: Nov 7, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-36414.0The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from CVE-2014-36426.5vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authe CVE-2014-36437.5jersey: XXE via parameter entities not disabled by the jersey SAX parser CVE-2014-36452.1arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allo CVE-2014-36465.5arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which CVE-2014-36475.5arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS CVE-2014-36487.5The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But th CVE-2014-36496.1JBoss AeroGear has reflected XSS via the password field CVE-2014-36505.4Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker CVE-2014-36517.5JBoss KeyCloak before 1.0.3.Final allows remote attackers to cause a denial of service (resource consumption) via a large value in the size CVE-2014-36526.1JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.CVE-2014-36534.3Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrar