PT-2014-4346 · Xen · Xen

Matthew Daley · Publicado 2014-04-01 · Atualizado 2017-01-07 · CVE-2014-1891

NVD

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:M/Au:S/C:N/I:N/A:C

Multiple integer overflows in the (1) FLASK GETBOOL, (2) FLASK SETBOOL, (3) FLASK USER, and (4) FLASK CONTEXT TO SID suboperations in the flask hypercall in Xen 4.3.x, 4.2.x, 4.1.x, 3.2.x, and earlier, when XSM is enabled, allow local users to cause a denial of service (processor fault) via unspecified vectors, a different vulnerability than CVE-2014-1892, CVE-2014-1893, and CVE-2014-1894.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2014-1891

Produtos afetados

Xen

Referências · 9

• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/02/07/4 · Nota
• http://xenbits.xen.org/xsa/advisory-84.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/02/07/12 · Nota
• http://openwall.com/lists/oss-security/2014/02/10/8 · Nota
• http://security.gentoo.org/glsa/glsa-201407-03.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-1891 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html · Aviso do Fabricante