PT-2014-5467 · Xen · Xen

Thomas Leonard · Publicado 2014-05-19 · Atualizado 2018-10-30 · CVE-2014-3714

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x

Description The issue concerns the ARM image loading functionality, which fails to properly validate kernel length. This allows local users to potentially read system memory or cause a denial of service by crafting a 32-bit ARM guest kernel in an image, leading to a buffer overflow.

Recommendations For Xen version 4.4.x, update to a version that includes the fix for the ARM image loading functionality to prevent buffer overflows.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-3714

Produtos afetados

Xen

Referências · 9

• https://cve.org/CVERecord?id=CVE-2014-3714 · Nota de Segurança
• http://securitytracker.com/id/1030252 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3714 · Nota de Segurança
• https://ubuntu.com/security/CVE-2014-3714 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/05/14/4 · Nota
• http://openwall.com/lists/oss-security/2014/05/15/6 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3714 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/05/16/1 · Nota
• http://xenbits.xen.org/xsa/advisory-95.html · Aviso do Fabricante