CVE-2014-3471

Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio block devices.

• CWE-416

• http://security.gentoo.org/glsa/glsa-201412-01.xmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/06/23/4Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/68145Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1112271Issue Tracking, Patch, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2014-06/msg05283.htmlPatch, Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201412-01.xmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/06/23/4Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/68145Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1112271Issue Tracking, Patch, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2014-06/msg05283.htmlPatch, Third Party Advisory

Published

Jan 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3465The gnutls_x509_dn_oid_name function in lib/x509/common.c in…
• CVE-2014-3466Buffer overflow in the read_server_hello function in lib/gnu…
• CVE-2014-3467Multiple unspecified vulnerabilities in the DER decoder in G…
• CVE-2014-3468The asn1_get_bit_der function in GNU Libtasn1 before 3.6 doe…
• CVE-2014-3469The (1) asn1_read_value_type and (2) asn1_read_value functio…
• CVE-2014-3470The ssl3_send_client_key_exchange function in s3_clnt.c in O…
• CVE-2014-3472The isCallerInRole function in SimpleSecurityManager in JBos…
• CVE-2014-3473Cross-site scripting (XSS) vulnerability in the Orchestratio…
• CVE-2014-3474Cross-site scripting (XSS) vulnerability in horizon/static/h…
• CVE-2014-3475Cross-site scripting (XSS) vulnerability in the Users panel …
• CVE-2014-3476OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before…
• CVE-2014-3477The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1…4