CVE-2014-0142: QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and cras...

Security readout for executives and security teams

CVE-2014-0142 is a QEMU denial-of-service flaw. A local user can trigger a divide-by-zero crash through malformed values handled by Parallels or Bochs disk image parsing. The documented impact is availability loss, not data theft or code execution. Exposure is most relevant to systems running older QEMU packages, especially virtualization hosts or tooling that lets local users handle untrusted Parallels or Bochs disk images. The provided affected-product metadata is incomplete. Prioritize remediation on shared virtualization infrastructure and systems that process user-supplied disk images. This is not documented as remote code execution, but a QEMU crash can still disrupt hosted workloads and operational availability. Mitigation focus: Apply applicable QEMU security updates from your operating system vendor.; Review Red Hat RHSA-2014:0420 and RHSA-2014:0421 guidance where relevant.; Review Debian DSA-3044 guidance where relevant..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.