Published: 07/05/2014 Updated: 30/10/2018

CVSS v2 Base Score: 6.7 | Impact Score: 8.5 | Exploitability Score: 5.1

VMScore: 596

Vector: AV:A/AC:L/Au:S/C:P/I:P/A:C

The HVMOP_set_mem_type control in Xen 4.1 up to and including 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page table translations for unspecified memory page types.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 4.2.2
xen xen 4.2.3
xen xen 4.1.6.1
xen xen 4.3.0
xen xen 4.3.1
xen xen 4.1.2
xen xen 4.1.3
xen xen 4.2.0
xen xen 4.2.1
xen xen 4.1.4
xen xen 4.1.5
xen xen 4.4.0
xen xen 4.1.0
xen xen 4.1.1

Debian Bug report logs - #757724 Multiple security issues Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 10 Aug 2014 20:21:01 UTC Severity: important Tags: fixed-upstream, security Merged with 751894 Fix ...

Debian Bug report logs - #751894 xen: CVE-2014-4021 / XSA-100 Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Henri Salo <henri@nervfi> Date: Tue, 17 Jun 2014 16:30:02 UTC Severity: important Tags: fixed-upstream, security Merged with 757724 Fixed in ...

Multiple security issues have been discovered in the Xen virtualisation solution which may result in information leaks or denial of service For the stable distribution (wheezy), these problems have been fixed in version 414-3+deb7u2 For the unstable distribution (sid), these problems will be fixed soon We recommend that you upgrade your xen pa ...

The HVMOP_set_mem_type control in Xen 41 through 44x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page table translations for unspecified memory page types ...

CWE-264 http://www.openwall.com/lists/oss-security/2014/04/29/1 http://www.securityfocus.com/bid/67113 http://xenbits.xen.org/xsa/advisory-92.html http://www.securitytracker.com/id/1030160 http://www.openwall.com/lists/oss-security/2014/04/30/10 http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133191.html http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133148.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html http://www.debian.org/security/2014/dsa-3006 http://security.gentoo.org/glsa/glsa-201407-03.xml https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757724 https://access.redhat.com/security/cve/cve-2014-3124 https://www.debian.org/security/./dsa-3006

CVE-2014-3124

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect