PT-2014-6301 · Xen+2 · Xen+2

Jan Beulich · Publicado 2014-08-22 · Atualizado 2024-06-15 · CVE-2014-5146

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.2.x through 4.4.x

Description The issue affects certain MMU virtualization operations in Xen when using Hardware Assisted Paging (HAP). These operations are not preemptible, allowing a local HVM guest to cause a denial of service by consuming vcpu resources. This can be achieved by invoking these operations, which process every page assigned to a guest.

Recommendations For Xen versions 4.2.x through 4.4.x, apply the xsa97-hap patch to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2014-2061

CVE-2014-5146

OPENSUSE-SU-2015_0226-1

OPENSUSE-SU-2015_0256-1

OPENSUSE-SU-2024:10196-1

Produtos afetados

Alt Linux

Suse

Xen

Referências · 177

• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=889526 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=906996 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• https://suse.com/security/cve/CVE-2012-5513 · Nota
• http://support.novell.com/security/cve/CVE-2013-3495.html · Nota
• https://security.gentoo.org/glsa/201504-04 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-3495 · Nota