CVE-2014-0142

QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.

• CWE-369

• http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=8e53abbc20d08ae3ec30c2054e1161314ad9501d
• http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9302e863aa8baa5d932fc078967050c055fa1a7f
• http://rhn.redhat.com/errata/RHSA-2014-0420.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0421.htmlThird Party Advisory
• http://www.debian.org/security/2014/dsa-3044
• https://bugzilla.redhat.com/show_bug.cgi?id=1078201Issue Tracking, Third Party Advisory
• http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=8e53abbc20d08ae3ec30c2054e1161314ad9501d
• http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9302e863aa8baa5d932fc078967050c055fa1a7f
• http://rhn.redhat.com/errata/RHSA-2014-0420.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0421.htmlThird Party Advisory
• http://www.debian.org/security/2014/dsa-3044
• https://bugzilla.redhat.com/show_bug.cgi?id=1078201Issue Tracking, Third Party Advisory

Published

Aug 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0136The (1) get and (2) log methods in the AgentController in Re…
• CVE-2014-0137SQL injection vulnerability in the saved_report_delete actio…
• CVE-2014-0138The default configuration in cURL and libcurl 7.10.6 before …
• CVE-2014-0139cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, …
• CVE-2014-0140Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 a…
• CVE-2014-0141Cross-site scripting (XSS) vulnerability in Red Hat Satellit…
• CVE-2014-0143Multiple integer overflows in the block drivers in QEMU, pos…
• CVE-2014-0144QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 a…8.6
• CVE-2014-0145Multiple buffer overflows in QEMU before 1.7.2 and 2.x befor…
• CVE-2014-0146The qcow2_open function in the (block/qcow2.c) in QEMU befor…
• CVE-2014-0147Qemu before 1.6.2 block diver for the various disk image for…6.2
• CVE-2014-0148Qemu before 2.0 block driver for Hyper-V VHDX Images is vuln…5.5