PT-2014-4955 · Citrix+1 · Xen+1

Julien Grall + 1 · Published 2014-04-24 · Updated 2018-10-30 · CVE-2014-2915

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x

Description The issue is related to improper restriction of access to hardware features on ARM systems, which can be exploited by local guest users to cause a denial of service, resulting in a host or guest crash. This is related to cache control, coprocessors, debug registers, and other unspecified registers.

Recommendations For Xen version 4.4.x, restrict access to hardware features to prevent local guest users from causing a denial of service. As a temporary workaround, consider disabling access to cache control, coprocessors, debug registers, and other sensitive registers until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2014-1545

CVE-2014-2915

Affected Products

Alt Linux

Xen

References · 14

• https://ubuntu.com/security/CVE-2014-2915 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2915 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-2915 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-2915 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2986 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2915 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1545 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-93.html · Vendor Advisory
• https://packages.altlinux.org/ru/vuln/CVE-2014-2915 · Note
• http://openwall.com/lists/oss-security/2014/04/23/2 · Note
• http://xenbits.xenproject.org/xsa/advisory-93.html · Note
• http://lists.xen.org/archives/html/xen-announce/2014-04/msg00003.html · Note
• http://securitytracker.com/id/1030135 · Note
• http://openwall.com/lists/oss-security/2014/04/22/10 · Note