PT-2014-7809 · Xen+1 · Xen+1

Andrew Cooper · Publicado 2014-10-02 · Atualizado 2024-06-15 · CVE-2014-7154

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0.0 through 4.4.x

Description A race condition exists in the HVMOP track dirty vram function, which does not properly ensure possession of the guarding lock for dirty video RAM tracking. This issue allows certain local guest domains to cause a denial of service via unspecified vectors.

Recommendations For Xen versions 4.0.0 through 4.4.x, consider applying a patch that fixes the race condition in the HVMOP track dirty vram function to prevent denial of service attacks.

Correção

DoS

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2014-7154

DSA-3041-1

OPENSUSE-SU-2014_1279-1

OPENSUSE-SU-2014_1281-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2015:0940-1

Produtos afetados

Suse

Xen

Referências · 177

• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html · Aviso do Fabricante
• https://bugzilla.suse.com/show_bug.cgi?id=878841 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=862608 · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• https://suse.com/security/cve/CVE-2012-5513 · Nota
• https://suse.com/security/cve/CVE-2013-3495 · Nota
• https://suse.com/security/cve/CVE-2015-7512 · Nota