Published: 01/12/2014 Updated: 30/10/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and previous versions lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to cause a denial of service (host crash) via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux 5.0
redhat enterprise linux desktop 5.0
xen xen 3.2.1
xen xen 3.2.2
xen xen 3.2.3
xen xen 4.4.0
xen xen 4.4.1
xen xen
debian debian linux 7.0
opensuse opensuse 13.2
opensuse opensuse 13.1

Debian Bug report logs - #770230 xen: CVE-2014-5146 CVE-2014-5149 CVE-2014-8594 CVE-2014-8595 CVE-2014-9030 Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Wed, 19 Nov 2014 22:48:01 UTC Severity: important Tags ...

Multiple security issues have been discovered in the Xen virtualisation solution which may result in denial of service, information disclosure or privilege escalation CVE-2014-8594 Roger Pau Monne and Jan Beulich discovered that incomplete restrictions on MMU update hypercalls may result in privilege escalation CVE-2014-8595 Jan ...

CWE-17 http://xenbits.xenproject.org/xsa/advisory-112.html http://www.securityfocus.com/bid/71331 http://secunia.com/advisories/59949 http://secunia.com/advisories/62672 http://www.debian.org/security/2015/dsa-3140 http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html http://rhn.redhat.com/errata/RHSA-2015-0783.html http://support.citrix.com/article/CTX201794 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 https://security.gentoo.org/glsa/201504-04 http://support.citrix.com/article/CTX200288 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770230 https://nvd.nist.gov https://www.debian.org/security/./dsa-3140

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-8867

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect