USN-2439-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 11 Dec 2014, 19:10
Last modified:04 Feb 2026, 02:42
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
11 Dec 2014, 19:10
Published
Vulnerability first disclosed
04 Feb 2026, 02:42
Last Modified
Vulnerability information updated
Description
qemu, qemu-kvm vulnerabilities Michael S. Tsirkin discovered that QEMU incorrectly handled certain parameters during ram load while performing a migration. An attacker able to manipulate savevm data could use this issue to possibly execute arbitrary code on the host. This issue only affected Ubuntu 12.04 LTS, Ubuntu 14.04 LTS, and Ubuntu 14.10. (CVE-2014-7840) Paolo Bonzini discovered that QEMU incorrectly handled memory in the Cirrus VGA device. A malicious guest could possibly use this issue to write into memory of the host, leading to privilege escalation. (CVE-2014-8106)
Affected Systems
- ubuntu•qemu
< 2.0.0+dfsg-2ubuntu1.9