CVE-2014-0148

Name	CVE-2014-0148
Description	Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
Debian Bugs	742730

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
qemu (PTS)	buster	1:3.1+dfsg-8+deb10u8	fixed
	buster (security)	1:3.1+dfsg-8+deb10u9	fixed
	bullseye (security), bullseye	1:5.2+dfsg-11+deb11u2	fixed
	bookworm	1:7.2+dfsg-1	fixed
	sid	1:7.2+dfsg-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
qemu	source	squeeze	(not affected)
qemu	source	wheezy	(not affected)
qemu	source	(unstable)	2.0.0+dfsg-1	742730
qemu-kvm	source	(unstable)	(not affected)

Notes

[squeeze] - qemu <not-affected> (vhdx support introduced in 1.5)
[wheezy] - qemu <not-affected> (vhdx support introduced in 1.5)
- qemu-kvm <not-affected> (vhdx support introduced in 1.5)