PT-2014-4955 · Citrix+1 · Xen+1

Julien Grall + 1 · Publicado 2014-04-24 · Atualizado 2018-10-30 · CVE-2014-2915

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x

Description The issue is related to improper restriction of access to hardware features on ARM systems, which can be exploited by local guest users to cause a denial of service, resulting in a host or guest crash. This is related to cache control, coprocessors, debug registers, and other unspecified registers.

Recommendations For Xen version 4.4.x, restrict access to hardware features to prevent local guest users from causing a denial of service. As a temporary workaround, consider disabling access to cache control, coprocessors, debug registers, and other sensitive registers until a patch is available.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2014-1545

CVE-2014-2915

Produtos afetados

Alt Linux

Xen

Referências · 14

• https://packages.altlinux.org/ru/vuln/CVE-2014-2915 · Nota
• https://ubuntu.com/security/CVE-2014-2915 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/04/23/2 · Nota
• http://xenbits.xenproject.org/xsa/advisory-93.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2915 · Nota de Segurança
• http://lists.xen.org/archives/html/xen-announce/2014-04/msg00003.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2915 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2014-2915 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2986 · Nota de Segurança
• http://securitytracker.com/id/1030135 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2915 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2014-1545 · Aviso do Fabricante
• http://xenbits.xen.org/xsa/advisory-93.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/04/22/10 · Nota