suse · CVE-2014-0147

Quick triage

Priority: medium Published: 2021-05-30 13:17:35 UTC Updated: 2026-04-18 18:46:28 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-0147 severity moderate: SUSE including 293 source package names (kvm, kvm-1.4.2-0.11.1, …), 1057 product×package rows across 75 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.5, … (75 product lines)): Known Not Affected 727, Fixed 330.

Description:

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.

cvelogic Threat Intelligence