CVE-2019-14284

MEDIUM Year: 2019
CVSS v3 Score
6.2
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-369
View all →

Vulnerability Description

In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default.

Related Vulnerabilities

CVE-2016-8667

MEDIUM
CVSS:6.0(Medium)

The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large in...

CWE-3692016

CVE-2016-8669

MEDIUM
CVSS:6.0(Medium)

The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) v...

CWE-3692016

CVE-2024-1298

MEDIUM
CVSS:6.0(Medium)

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead t...

CWE-3692024

CVE-2014-8130

MEDIUM
CVSS:6.5(Medium)

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a craft...

CWE-3692014

CVE-2015-7513

MEDIUM
CVSS:6.5(Medium)

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and hos...

CWE-3692015

CVE-2015-8504

MEDIUM
CVSS:6.5(Medium)

Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.

CWE-3692015