CVE-2014-3672

6.5 MEDIUM

Published: May 25, 2016 Modified: May 06, 2026

Description

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/05/24/5

Source: secalert@redhat.com

Mailing List

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securitytracker.com/id/1035945

Source: secalert@redhat.com

Third Party Advisory VDB Entry

http://xenbits.xen.org/xsa/advisory-180.html

Source: secalert@redhat.com

Vendor Advisory

https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=0d968ad715475a1660779bcdd2c5b38ad63db4cf

Source: secalert@redhat.com

https://libvirt.org/news-2015.html

Source: secalert@redhat.com

Release Notes Vendor Advisory

http://www.openwall.com/lists/oss-security/2016/05/24/5