CVE-2014-3672

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
May 25, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-36737.5The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformCVE-2014-36747.5Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resoCVE-2014-36755.0Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.CVE-2014-36767.5Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCCVE-2014-36777.5Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.CVE-2014-36784.3Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web CVE-2014-36795.0The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.CVE-2014-36804.0Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for tCVE-2014-36814.3Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web scriCVE-2014-36827.5XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-CVE-2014-36835.0Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of servCVE-2014-36846.8The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2
CVE-2014-3672: Medium severity, CVSS 6.5 | Vulnix