Published: 05/06/2014 Updated: 30/10/2018

CVSS v2 Base Score: 5.5 | Impact Score: 6.9 | Exploitability Score: 5.1

VMScore: 490

Vector: AV:A/AC:L/Au:S/C:N/I:N/A:C

The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted requests, which trigger an error messages to be logged.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 4.3.1
xen xen 4.3.0
xen xen 4.2.2
xen xen 4.2.3
xen xen 4.2.0
xen xen 4.2.1
opensuse opensuse 12.3
opensuse opensuse 13.1
xen xen 4.4.0

Debian Bug report logs - #757724 Multiple security issues Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 10 Aug 2014 20:21:01 UTC Severity: important Tags: fixed-upstream, security Merged with 751894 Fix ...

Debian Bug report logs - #751894 xen: CVE-2014-4021 / XSA-100 Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Henri Salo <henri@nervfi> Date: Tue, 17 Jun 2014 16:30:02 UTC Severity: important Tags: fixed-upstream, security Merged with 757724 Fixed in ...

The HVMOP_inject_msi function in Xen 42x, 43x, and 44x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted requests, which trigger an error messages to be logged ...

NVD-CWE-noinfo http://www.securitytracker.com/id/1030322 http://www.securityfocus.com/bid/67794 http://xenbits.xen.org/xsa/advisory-96.html http://www.openwall.com/lists/oss-security/2014/06/04/13 http://www.securityfocus.com/bid/67824 http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134710.html http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134739.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html https://security.gentoo.org/glsa/201504-04 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757724 https://access.redhat.com/security/cve/cve-2014-3968

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-3968

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect