Published: 05/06/2014 Updated: 30/10/2018

CVSS v2 Base Score: 5.5 | Impact Score: 6.9 | Exploitability Score: 5.1

VMScore: 490

Vector: AV:A/AC:L/Au:S/C:N/I:N/A:C

The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 4.2.3
xen xen 4.2.1
xen xen 4.2.2
xen xen 4.2.0
xen xen 4.4.0
opensuse opensuse 13.1
opensuse opensuse 12.3
xen xen 4.3.0
xen xen 4.3.1

Debian Bug report logs - #757724 Multiple security issues Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 10 Aug 2014 20:21:01 UTC Severity: important Tags: fixed-upstream, security Merged with 751894 Fix ...

Debian Bug report logs - #751894 xen: CVE-2014-4021 / XSA-100 Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Henri Salo <henri@nervfi> Date: Tue, 17 Jun 2014 16:30:02 UTC Severity: important Tags: fixed-upstream, security Merged with 757724 Fixed in ...

The HVMOP_inject_msi function in Xen 42x, 43x, and 44x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors ...

NVD-CWE-Other http://xenbits.xen.org/xsa/advisory-96.html http://www.openwall.com/lists/oss-security/2014/06/04/13 http://www.securityfocus.com/bid/67794 http://www.securitytracker.com/id/1030322 http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134710.html http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134739.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html https://security.gentoo.org/glsa/201504-04 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757724 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-3967

CVE-2014-3967

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect