PT-2014-5642 · Xen+1 · Xen+1

Jan Beulich · Publicado 2014-06-05 · Atualizado 2018-10-30 · CVE-2014-3968

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.2.x through 4.4.x

Description The issue allows local guest HVM administrators to cause a denial of service, resulting in a host crash, by sending a large number of crafted requests. This triggers error messages to be logged.

Recommendations For Xen versions 4.2.x through 4.4.x, consider restricting access to the HVMOP inject msi function as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2014-3968

OPENSUSE-SU-2014_1279-1

OPENSUSE-SU-2014_1281-1

Produtos afetados

Suse

Xen

Referências · 52

• https://bugzilla.suse.com/show_bug.cgi?id=858178 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=895799 · Nota
• http://support.novell.com/security/cve/CVE-2014-3968.html · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=878841 · Nota
• http://xenbits.xen.org/xsa/advisory-96.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134739.html · Aviso do Fabricante
• http://support.novell.com/security/cve/CVE-2014-4021.html · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=798770 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=895798 · Nota
• http://support.novell.com/security/cve/CVE-2014-2599.html · Nota
• http://securityfocus.com/bid/67794 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/EMA77RMT4BV6BHVYDYY6YMYNXGXZ63IC · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=862608 · Nota
• https://security.gentoo.org/glsa/201504-04 · Aviso do Fabricante
• https://bugzilla.suse.com/show_bug.cgi?id=875668 · Nota