CVE-2014-5388 — Qemu: out of bounds memory access

Back Back to CVE browser

MEDIUM

Qemu: out of bounds memory access

Published Nov 15, 2014

4.6

MEDIUM

CVSS 2.0

EPSS 0.39%

Description

Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.

Affected products

Red Hat Enterprise Linux 5

kvm

Not affected
Red Hat Enterprise Linux 6

qemu-kvm

Not affected
Red Hat Enterprise Linux 7

qemu-kvm

Not affected
Red Hat Enterprise Linux 7

qemu-kvm-rhev

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kvm	Not affected	n/a
Red Hat Enterprise Linux 6	qemu-kvm	Not affected	n/a
Red Hat Enterprise Linux 7	qemu-kvm	Not affected	n/a
Red Hat Enterprise Linux 7	qemu-kvm-rhev	Affected	n/a

Remediation

Red Hat statement

This issue does not affect the versions of kvm package as shipped with Red Hat Enterprise Linux 5. This issue does not affect the versions of qemu-kvm package as shipped with Red Hat Enterprise Linux 6 and 7.

Metrics

0.39% 0.00394

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00394

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.39% (0.00394)	31.19th	v5 (v2026.06.15)
Jun 15, 2026	0.39% (0.00394)	30.98th	v5 (v2026.06.15)
Mar 17, 2025	0.10% (0.00095)	24.56th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00062)	28.60th	v3 (v2023.03.01)
Jun 13, 2024	0.06% (0.00062)	26.61th	v3 (v2023.03.01)
Mar 7, 2023	0.06% (0.00062)	24.59th	v3 (v2023.03.01)
Mar 6, 2023	1.03% (0.01034)	41.69th	v2 (v2022.01.01)
Sep 10, 2022	1.03% (0.01034)	39.91th	v2 (v2022.01.01)
Apr 1, 2022	1.03% (0.01034)	37.91th	v2 (v2022.01.01)
Feb 4, 2022	1.03% (0.01034)	20.32th	v2 (v2022.01.01)

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-193

References (9)

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa365d7cd11185237471823a5a33d36765454e16
x_refsource_CONFIRM
http://seclists.org/oss-sec/2014/q3/438
mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
http://seclists.org/oss-sec/2014/q3/440
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.ubuntu.com/usn/USN-2409-1
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://access.redhat.com/security/cve/CVE-2014-5388
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1132956
x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2014-08/msg03338.html
mailing-listx_refsource_MLISTPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-5388
https://www.cve.org/CVERecord?id=CVE-2014-5388

Link	Providers	Tags
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa365d7cd11185237471823a5a33d36765454e16		x_refsource_CONFIRM
http://seclists.org/oss-sec/2014/q3/438		mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
http://seclists.org/oss-sec/2014/q3/440		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.ubuntu.com/usn/USN-2409-1		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://access.redhat.com/security/cve/CVE-2014-5388		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1132956		x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2014-08/msg03338.html		mailing-listx_refsource_MLISTPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-5388
https://www.cve.org/CVERecord?id=CVE-2014-5388