CVE-2014-7840

The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.

• CWE-20

• http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=0be839a2701369f669532ea5884c15bead1c6e08
• http://rhn.redhat.com/errata/RHSA-2015-0349.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0624.htmlThird Party Advisory
• http://thread.gmane.org/gmane.comp.emulators.qemu/306117Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=1163075Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99194Third Party Advisory, VDB Entry
• http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=0be839a2701369f669532ea5884c15bead1c6e08
• http://rhn.redhat.com/errata/RHSA-2015-0349.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0624.htmlThird Party Advisory
• http://thread.gmane.org/gmane.comp.emulators.qemu/306117Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=1163075Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99194Third Party Advisory, VDB Entry

Published

Dec 12, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7834mod/forum/externallib.php in Moodle 2.6.x before 2.6.6 and 2…
• CVE-2014-7835webservice/upload.php in Moodle 2.6.x before 2.6.6 and 2.7.x…
• CVE-2014-7836Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-7837mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.…
• CVE-2014-7838Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-7839DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not config…
• CVE-2014-7841The sctp_process_param function in net/sctp/sm_make_chunk.c …
• CVE-2014-7842Race condition in arch/x86/kvm/x86.c in the Linux kernel bef…
• CVE-2014-7843The __clear_user function in arch/arm64/lib/clear_user.S in …
• CVE-2014-7844BSD mailx 8.1.2 and earlier allows remote attackers to execu…7.8
• CVE-2014-7845The generate_password function in Moodle through 2.4.11, 2.5…
• CVE-2014-7846tag/tag_autocomplete.php in Moodle through 2.4.11, 2.5.x bef…