QEMU < 1.6.2: QCOW2 snapshot update_refcount crash
CVE-2014-0147 Published on September 29, 2022
Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.
Products Associated with CVE-2014-0147
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2014-0147 are published in these products:
Exploit Probability
EPSS
0.12%
Percentile
31.04%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.