Medium severity5.5NVD Advisory· Published Aug 10, 2017· Updated Jun 17, 2026

CVE-2014-0142

Description

QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

QEMU/Qemu2 versions
cpe:2.3:a:qemu:qemu:*:rc3:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:qemu:qemu:*:rc3:*:*:*:*:*:*range: <=2.0.0
- (no CPE)range: <2.0.0
osv-coords
pkg:rpm/opensuse/qemu&distro=openSUSE%20Tumbleweed
Range: < 2.6.1-1.5

Patches

Vulnerability mechanics

References

rhn.redhat.com/errata/RHSA-2014-0420.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2014-0421.htmlnvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
git.qemu.orgnvd
git.qemu.orgnvd
www.debian.org/security/2014/dsa-3044nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000