[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIDwgahCY0NPuygWUwy2WoxjHa5qoMubEzj449Psax44":3,"g5a-risk:CVE-2014-0148":167},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":67,"references":68,"referencesCount":95,"weaknesses":96,"weaknessesCount":105,"isActivelyExploited":106,"cisaInfo":27,"otxData":27,"relatedBlogPosts":107,"seoMetadata":108,"configurations":133,"relatedVendorCves":162,"notableEvents":163},"CVE-2014-0148","What is CVE-2014-0148?","Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.","Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing ...","2022-09-29T03:15:11.34","2023-02-13T00:33:10.31",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,0.00304,[30,30,30,30,30,30,30],"Medium",[34,38,43,47,51,55,58,61,64],{"vendor":35,"product":35,"version":36,"criteria":37,"vulnerable":4},"qemu","*","cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"redhat","virtualization","3.0","cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":4},"enterprise_linux_desktop","6.0","cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",{"vendor":39,"product":48,"version":49,"criteria":50,"vulnerable":4},"enterprise_linux_eus","6.5","cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*",{"vendor":39,"product":52,"version":53,"criteria":54,"vulnerable":4},"enterprise_linux_openstack_platform","5","cpe:2.3:o:redhat:enterprise_linux_openstack_platform:5:*:*:*:*:*:*:*",{"vendor":39,"product":56,"version":45,"criteria":57,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":39,"product":59,"version":49,"criteria":60,"vulnerable":4},"enterprise_linux_server_aus","cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":49,"criteria":63,"vulnerable":4},"enterprise_linux_server_tus","cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*",{"vendor":39,"product":65,"version":45,"criteria":66,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",9,[69,73,78,81,87,91],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fgit.qemu.org\u002F?p=qemu.git%3Ba=commit%3Bh=1d7678dec4761acdc43439da6ceda41a703ba1a6","Qemu",[],{"url":74,"source":75,"tags":76},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0420.html","Red Hat",[77],"Third Party Advisory",{"url":79,"source":75,"tags":80},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0421.html",[77],{"url":82,"source":83,"tags":84},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2014\u002F03\u002F26\u002F8","Openwall",[85,86,77],"Mailing List","Patch",{"url":88,"source":75,"tags":89},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1078212",[90,86,77],"Issue Tracking",{"url":92,"source":93,"tags":94},"https:\u002F\u002Flists.gnu.org\u002Farchive\u002Fhtml\u002Fqemu-devel\u002F2014-03\u002Fmsg04994.html","Gnu",[85,86,77],6,[97],{"id":98,"name":99,"description":100,"extendedDescription":101,"status":102,"abstraction":103,"structure":104},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Incomplete","Base","Simple",1,false,[],{"title":109,"metaDescription":110,"keywords":111,"canonicalUrl":112,"structuredData":113},"What is CVE-2014-0148? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-0148, a medium severity cyber security vulnerability from 2022. Qemu before 2.0 block driver for Hyper-V VHDX Images is vu...","CVE-2014-0148, CVE-2014-0148 vulnerability, CVE-2014-0148 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, qemu security, redhat security, qemu vulnerability, virtualization vulnerability, enterprise_linux_desktop vulnerability, enterprise_linux_eus vulnerability, enterprise_linux_openstack_platform vulnerability","\u002Fwhat-is\u002Fcve-2014-0148",{"@context":114,"@type":115,"headline":109,"description":110,"datePublished":10,"dateModified":11,"author":116,"publisher":120,"about":124,"mainEntityOfPage":128,"articleSection":131,"keywords":132},"https:\u002F\u002Fschema.org","TechArticle",{"@type":117,"name":118,"url":119},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":117,"name":118,"url":119,"logo":121},{"@type":122,"url":123},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":125,"name":6,"description":126,"additionalType":127},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":129,"@id":130},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-0148","Cybersecurity","CVE-2014-0148, CVE-2014-0148 vulnerability, CVE-2014-0148 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[134,142],{"Operator":27,"Negate":27,"Nodes":135},[136],{"Operator":137,"Negate":27,"CPEMatch":138},"OR",[139],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":141,"VersionEndIncluding":27},"17C21D4E-49B0-4DED-99BA-DBE313C548BC","2.0.0",{"Operator":27,"Negate":27,"Nodes":143},[144],{"Operator":137,"Negate":27,"CPEMatch":145},[146,148,150,152,154,156,158,160],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D86166F9-BBF0-4650-8CCD-0F9C97104D21",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"569964DA-31BE-4520-A66D-C3B09D557AB8",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C0D1C568-6B3A-4F73-977E-DAA981736120",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"835AE071-CEAE-49E5-8F0C-E5F50FB85EFC",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E5ED5807-55B7-47C5-97A6-03233F4FBC3A",[],[],{"lastModified":11,"cacheTime":165,"version":166},1792350210352,"2.0",{"score":168,"band":169,"action":170,"scoredAt":171},21,"Low","Monitor","2026-10-16T06:55:51.763451+00:00"]