Skip to main content

Red Hat CVE-2025-14876

MEDIUM
Allocation of Resources Without Limits or Throttling (CWE-770)
2026-02-18 patrick@puiterwijk.org
Denial Of Service Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SUSE
MEDIUM
qualitative
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
CVE Published
Feb 18, 2026 - 21:16 nvd
MEDIUM 5.5

DescriptionCVE.org

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly.

AnalysisAI

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. [CVSS 5.5 MEDIUM]

Technical ContextAI

This vulnerability (CWE-770: Allocation of Resources Without Limits or Throttling) exists in the a denial of component. was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly.

Affected ProductsAI

Component: a denial of.

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

View all
CVE-2017-8779 HIGH POC
7.5
CVE-2025-53521 CRITICAL POC
9.3
CVE-2017-5850 HIGH POC
7.5
CVE-2025-26682 HIGH
7.5
CVE-2025-41770 HIGH
8.7
CVE-2025-26466 MEDIUM
5.9
CVE-2020-37067 CRITICAL POC
9.8
CVE-2021-47875 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.56 Container suse/sl-micro/6.0/base-os-container:2.1.3-7.24 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.58 Container suse/sl-micro/6.0/toolbox:13.2-9.16 Image SL-Micro Affected
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.122 Affected
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.52 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.72 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.66 Affected
Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.75 Affected
Container suse/sle-micro/kvm-5.5:2.0.4-3.5.481 Affected

Share

CVE-2025-14876 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy