CVE Vulnerabilities

CVE-2014-5147

Published: Aug 29, 2014 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:A/AC:H/Au:S/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of service (host crash) via a crafted 32-bit process.

Affected Software

Name Vendor Start Version End Version
Xen Xen 4.4.0 (including) 4.4.0 (including)
Xen Xen 4.4.0-rc1 (including) 4.4.0-rc1 (including)
Xen Ubuntu devel *
Xen Ubuntu trusty *
Xen Ubuntu upstream *
Xen Ubuntu utopic *
Xen-3.3 Ubuntu upstream *

References