Published: 02/10/2014 Updated: 30/10/2018

CVSS v2 Base Score: 5.8 | Impact Score: 6.4 | Exploitability Score: 6.5

VMScore: 516

Vector: AV:A/AC:L/Au:N/C:P/I:P/A:P

The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and previous versions does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 3.1.3
xen xen 3.1.4
xen xen 3.3.2
xen xen 3.4.0
xen xen 4.0.3
xen xen 4.0.4
xen xen 4.1.6.1
xen xen 4.2.0
xen xen 4.4.0
xen xen
xen xen 3.2.0
xen xen 3.2.1
xen xen 3.4.1
xen xen 3.4.2
xen xen 4.1.0
xen xen 4.1.1
xen xen 4.2.1
xen xen 4.2.2
xen xen 3.0.3
xen xen 3.0.4
xen xen 3.3.0
xen xen 3.3.1
xen xen 4.0.0
xen xen 4.0.1
xen xen 4.0.2
xen xen 4.1.4
xen xen 4.1.5
xen xen 4.3.1
xen xen 3.0.2
xen xen 3.2.2
xen xen 3.2.3
xen xen 3.4.3
xen xen 3.4.4
xen xen 4.1.2
xen xen 4.1.3
xen xen 4.2.3
xen xen 4.3.0
debian debian linux 7.0
fedoraproject fedora 19
fedoraproject fedora 20
opensuse opensuse 13.1
opensuse opensuse 12.3

Multiple security issues have been discovered in the Xen virtualisation solution which may result in denial of service, information disclosure or privilege escalation For the stable distribution (wheezy), these problems have been fixed in version 414-3+deb7u3 For the unstable distribution (sid), these problems will be fixed soon We recommend t ...

The x86_emulate function in arch/x86/x86_emulate/x86_emulatec in Xen 44x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction ...

CWE-264 http://xenbits.xen.org/xsa/advisory-105.html http://www.securityfocus.com/bid/70057 http://www.securitytracker.com/id/1030888 http://support.citrix.com/article/CTX200218 http://secunia.com/advisories/61858 http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html http://www.debian.org/security/2014/dsa-3041 http://security.gentoo.org/glsa/glsa-201412-42.xml http://secunia.com/advisories/61890 https://nvd.nist.gov https://www.debian.org/security/./dsa-3041 https://access.redhat.com/security/cve/cve-2014-7155

CVE-2014-7155

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect